r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6896
Expires: Thu, 09 Feb 2023 01:22:19 GMT
Date: Wed, 08 Feb 2023 23:27:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8001
Expires: Thu, 09 Feb 2023 01:40:44 GMT
Date: Wed, 08 Feb 2023 23:27:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8899
Expires: Thu, 09 Feb 2023 01:55:42 GMT
Date: Wed, 08 Feb 2023 23:27:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 22:36:44 GMT
content-type: application/json
age: 3039
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MLb0W/V60O+Z6K1bgMXgcGDMNmyPjO8PYxbDUnZi/XmW3efkkP0kecsK+L9euKVnsr9dh4RLjgyc1X1gU2nmNg==
x-amz-request-id: 7WH9KF72SSDM8VEY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 22:36:07 GMT
age: 3076
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:23 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
200 OK 24 kB URL HTTP/1.1 ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9876), with CRLF, LF line terminators
Hash 4a7038eb5e32fbfa23692a29bf6b4712
f84942ca8463dabce7fbc94d065a4a9c00490363
e89c06bef577d3538963e500e140038c869f7988692f07db8874c581cb7b881f
GET /rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
X-Powered-By: PHP/7.4.33
Vary: Accept-Encoding, Accept-Encoding,Cookie
X-Pingback: http://ritorika.com.ua/xmlrpc.php
Link: <https://ritorika.com.ua/wp-json/>; rel="https://api.w.org/", <https://ritorika.com.ua/wp-json/wp/v2/posts/42234>; rel="alternate"; type="application/json", <https://ritorika.com.ua/?p=42234>; rel=shortlink
Content-Encoding: gzip
ritorika.com.ua/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash 981383d43a7adb38d6c2bf5286dcd065
e41871905868763178f7d8127e3dfb87909f108f
fceb208fc5a1581abc1926596d5f59fa41e7a7d72027b563303b445cdf7ed126
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Sun, 18 Dec 2022 06:47:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb76b-172a9"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-includes/css/classic-themes.min.css?ver=1
200 OK 189 B URL HTTP/1.1 ritorika.com.ua/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Sun, 18 Dec 2022 06:47:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb76b-d9"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-includes/js/thickbox/thickbox.css?ver=6.1.1
200 OK 939 B URL HTTP/1.1 ritorika.com.ua/wp-includes/js/thickbox/thickbox.css?ver=6.1.1
IP
Hash ba202c3af960a44cdd8ab5152650dca4
f1b0452b648dd92566947e572547be1fad735d69
b09840646b82209db604123f68711b1d0859c6cf7ec154594c5d7a25911fe658
GET /wp-includes/js/thickbox/thickbox.css?ver=6.1.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Fri, 18 Jun 2021 01:58:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"60cbfdd8-a63"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.90
200 OK 410 B URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.90
IP
Hash 6fbe34358aaf3ffe8e5ceb8add141952
f133a78ec7418af1b15544cc33a2bac9bef7c222
982b13d2a10244ad98ded7e9e1e02b315d7f829c2ea90005a6151ca6f1b9993e
GET /wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.90 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Sat, 29 Oct 2022 02:41:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"635c92d5-549"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/themes/neve/style-main-new.min.css?ver=3.2.5
200 OK 8.5 kB URL HTTP/1.1 ritorika.com.ua/wp-content/themes/neve/style-main-new.min.css?ver=3.2.5
IP
File type ASCII text, with very long lines (39007), with no line terminators
Hash 30d3924eef86c11b0f30a166ce3870db
0c5e74634fc60f1830df6d3a441e2e4148480468
c3d4419878b360cfe781169adec688092d05014375b9b33992be372f8c96c9e7
GET /wp-content/themes/neve/style-main-new.min.css?ver=3.2.5 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Fri, 10 Jun 2022 04:34:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"62a2c9e0-985f"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.3
200 OK 5.4 kB URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.3
IP
File type ASCII text, with very long lines (23432)
Hash a0b467481765fd0b37243a3b5507ce2b
e6500f64494b8f147c4f08bacf03ff058a723c74
0771a07efe2167e88807838cccb21885f8c48a3a601ca86e1d2a6c130c9456ee
GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.3 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Sun, 18 Dec 2022 06:47:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb784-5b89"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
wp-r.github.io/hgfhfgh/assets/js/jquery.iframetracker.js?ver=2.9.9
200 OK 2.0 kB URL HTTP/2 wp-r.github.io/hgfhfgh/assets/js/jquery.iframetracker.js?ver=2.9.9
IP
Hash eba784d1b45f65a4bb48fbb94f659ae5
91b6f3c0e7202580fd873976d4d17f714563fed9
19164f14d3f21021fcaa4d8a119f0c0e92164b3c48c041ea710dadc06cfeda80
GET /hgfhfgh/assets/js/jquery.iframetracker.js?ver=2.9.9 HTTP/1.1
Host: wp-r.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 23 Apr 2020 11:26:41 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"5ea17b71-155f"
expires: Tue, 17 Jan 2023 01:34:50 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 9C84:F1F7:3DCC8:4255C:63C5F8E2
accept-ranges: bytes
date: Wed, 08 Feb 2023 23:27:23 GMT
via: 1.1 varnish
age: 93
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 9
x-timer: S1675898844.812574,VS0,VE0
vary: Accept-Encoding
x-fastly-request-id: 4ab05fd6edef3eb8a29975dfa513a5d960c880be
content-length: 2038
X-Firefox-Spdy: h2
wp-r.github.io/hgfhfgh/assets/css/adsplacer.adblock.css?ver=2.9.9
200 OK 278 B URL HTTP/2 wp-r.github.io/hgfhfgh/assets/css/adsplacer.adblock.css?ver=2.9.9
IP
Hash f410db0018c9b3127ee31908af987e20
de6f32da1ee9c777ea332d5d0fa0b73e3d275db0
b8fabdca8ecfd8f1658a9f10304eee40023221ef88254efd65fb98f022ba4e7c
GET /hgfhfgh/assets/css/adsplacer.adblock.css?ver=2.9.9 HTTP/1.1
Host: wp-r.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 23 Apr 2020 11:26:41 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"5ea17b71-1c3"
expires: Tue, 31 Jan 2023 02:31:26 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: 7386:2F32:16D303:1E0138:63D87B8B
accept-ranges: bytes
date: Wed, 08 Feb 2023 23:27:23 GMT
via: 1.1 varnish
age: 112
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1675898844.818750,VS0,VE0
vary: Accept-Encoding
x-fastly-request-id: 15f7bf88833abec6888b2ba77519599168aea7a9
content-length: 278
X-Firefox-Spdy: h2
wp-r.github.io/hgfhfgh/assets/js/jquery.adsplacer.ab-testing.js?ver=2.9.9
200 OK 258 B URL HTTP/2 wp-r.github.io/hgfhfgh/assets/js/jquery.adsplacer.ab-testing.js?ver=2.9.9
IP
Hash 068ca8f2aca4766dd382c6302667a818
7431467bbc164ec76c92418a552e2638611e930b
74567cb89bbf112757fd993affb29d24e00c06c9a9258132cc3667e0573c75a9
GET /hgfhfgh/assets/js/jquery.adsplacer.ab-testing.js?ver=2.9.9 HTTP/1.1
Host: wp-r.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 23 Apr 2020 11:26:41 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"5ea17b71-289"
expires: Thu, 01 Dec 2022 00:04:54 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: C6FC:1D1F:1243587:12CCF33:6387ED4E
accept-ranges: bytes
date: Wed, 08 Feb 2023 23:27:23 GMT
via: 1.1 varnish
age: 28
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1675898844.821512,VS0,VE0
vary: Accept-Encoding
x-fastly-request-id: b80c0e7f89bc9245c2a3ee882d675d32a5ab58eb
content-length: 258
X-Firefox-Spdy: h2
ritorika.com.ua/wp-includes/css/dashicons.min.css?ver=6.1.1
200 OK 36 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/css/dashicons.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (58981)
Hash 8feeb31c2c2b1eac8f5dac3b20f6016d
9d9797e1a9e800bb6f9c5aea9eb9a0a1172a11fe
ea7991c406d76572a7d81ea53e3f78d70b4327fd50f759fd941047d66bf9b754
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Fri, 18 Jun 2021 01:58:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"60cbfdd7-e688"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash d00a2528156b7c889a754f2573a5f9a9
3e00c6750a64eb72d1c566e5d2ffadf566b1b6d0
536611c7cab68967ef652bf679d2fcc0d829b4ada87572973cb6e853b181d110
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4864
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:23 GMT
Last-Modified: Wed, 08 Feb 2023 22:06:19 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ads.themoneytizer.com/s/gen.js?type=11
200 OK 2.4 kB URL HTTP/1.1 ads.themoneytizer.com/s/gen.js?type=11
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (2659)
Hash 546c492b75d369ca4474b49a9d03476d
d2fc542ff48f56926e490e8c124d8c0d0a286b60
bbcba2acbec0b857fd27f03e230aef202fab539eaf9e4119ed4ab4d3fb03f092
GET /s/gen.js?type=11 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
X-Accel-Expires: @1676477072
Server: CDN77-Turbo
X-77-NZT: AblMCRSyqOX/y2cAAA
X-77-NZT-Ray: af5856307869286adb2fe463b8276031
X-Cache: HIT
X-Age: 26571
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
wp-r.github.io/hgfhfgh/assets/js/jquery.adsplacer.frontend.js?ver=2.9.9
200 OK 1.3 kB URL HTTP/2 wp-r.github.io/hgfhfgh/assets/js/jquery.adsplacer.frontend.js?ver=2.9.9
IP
Hash 5cb9da8ab8d7f80458a7d0140e8e75f7
33ee87a68b5f8db9e793f3066e8d93ec1baee253
6b51312e0dafcd95d0ed90c0ad5efe28dc7449f28cfca4752cfc0b3d0800eb4c
GET /hgfhfgh/assets/js/jquery.adsplacer.frontend.js?ver=2.9.9 HTTP/1.1
Host: wp-r.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 23 Apr 2020 11:26:41 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"5ea17b71-1489"
expires: Thu, 01 Dec 2022 04:34:23 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: A622:7782:9FFDCD:D34E5F:63882C77
accept-ranges: bytes
date: Wed, 08 Feb 2023 23:27:23 GMT
via: 1.1 varnish
age: 135
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 7
x-timer: S1675898844.824433,VS0,VE0
vary: Accept-Encoding
x-fastly-request-id: bcf2e007a10651c79418a98401fdb559905e2a39
content-length: 1305
X-Firefox-Spdy: h2
ads.themoneytizer.com/s/gen.js?type=3
200 OK 2.4 kB URL HTTP/1.1 ads.themoneytizer.com/s/gen.js?type=3
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (2659)
Hash 546c492b75d369ca4474b49a9d03476d
d2fc542ff48f56926e490e8c124d8c0d0a286b60
bbcba2acbec0b857fd27f03e230aef202fab539eaf9e4119ed4ab4d3fb03f092
GET /s/gen.js?type=3 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
X-Accel-Expires: @1676477072
Server: CDN77-Turbo
X-77-NZT: AblMCRTGADf/y2cAAA
X-77-NZT-Ray: af58563070682b6adb2fe46390536a31
X-Cache: HIT
X-Age: 26571
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
ads.themoneytizer.com/s/requestform.js?siteId=88050&formatId=11
200 OK 16 kB URL HTTP/1.1 ads.themoneytizer.com/s/requestform.js?siteId=88050&formatId=11
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (15908)
Hash bdf2d4c49a42e719ddc19fd17dff202f
fc97bd2e7a96015bbb8b379815b29c84da60b04e
99ab6c6f3419436b783fcf5d240fab180d2612349a4a0195af784a1b367ec2a5
GET /s/requestform.js?siteId=88050&formatId=11 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
X-Accel-Expires: @1676477147
Server: CDN77-Turbo
X-77-NZT: AblMCRS59t3/gGcAAA
X-77-NZT-Ray: af585630d075296adb2fe46379916631
X-Cache: HIT
X-Age: 26496
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
ads.themoneytizer.com/s/requestform.js?siteId=88050&formatId=19
200 OK 16 kB URL HTTP/1.1 ads.themoneytizer.com/s/requestform.js?siteId=88050&formatId=19
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (15908)
Hash 208ef47bef6691ab2076b351615e73e5
e011a5718de401a6644f7a341b88fc3c86fd1584
af3ed8223a66113ced7302a6acec5ee75a4c6de437577a471a999c6b5729c31f
GET /s/requestform.js?siteId=88050&formatId=19 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
X-Accel-Expires: @1676477147
Server: CDN77-Turbo
X-77-NZT: AblMCRR+82b/gGcAAA
X-77-NZT-Ray: af585630cf762e6adb2fe4634b956c31
X-Cache: HIT
X-Age: 26496
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
ads.themoneytizer.com/s/requestform.js?siteId=88050&formatId=3
200 OK 16 kB URL HTTP/1.1 ads.themoneytizer.com/s/requestform.js?siteId=88050&formatId=3
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (15908)
Hash 9f5dcce3ef9831dd5d024bbd6209f9f0
c521989adf042d098fa0112ef5591dcba75afc43
ee62c4c9f9901d56901277fad96c30c0b0b7fa300bdcd0c0b9a780c48a4ff353
GET /s/requestform.js?siteId=88050&formatId=3 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=604800
X-Accel-Expires: @1676477147
Server: CDN77-Turbo
X-77-NZT: AblMCRR+lmv/gGcAAA
X-77-NZT-Ray: af585630d0752a6adb2fe46309bb8631
X-Cache: HIT
X-Age: 26496
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
ritorika.com.ua/wp-includes/js/thickbox/thickbox.js?ver=3.1-20121105
200 OK 4.0 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/js/thickbox/thickbox.js?ver=3.1-20121105
IP
File type HTML document, ASCII text, with very long lines (597)
Hash 6ab55bda152ec0ad804795959f676182
e926aba0016ad03868990c71dfe107bb7aacad58
c8a7cb95c2a760f8c3d0685d5917f7835ac443c83a4057f13cbbdae7da970a36
GET /wp-includes/js/thickbox/thickbox.js?ver=3.1-20121105 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Sun, 18 Dec 2022 06:47:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb76a-33ba"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.css?ver=6.1.1
200 OK 1.4 kB URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (5396), with no line terminators
Hash 45dc770fd62b70d6481dc3f833a629e9
9362077d5dc98ae71540f257807be5d3aa9c732b
7492479311daba2c85d1f75970b533f510b786acae96cbc3ba8373d59bd34563
GET /wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.css?ver=6.1.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Sun, 18 Dec 2022 06:47:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb783-1514"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.90
200 OK 752 B URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.90
IP
File type ASCII text, with very long lines (516)
Hash deab93c8595e8c84524e7e55de38c32c
08830262c0eefacb54db6b9a5962c85dc3d92c32
3103aec032ac9b832b489a592e8a737394d8610d84de2fbe672b57bf0fe3b1be
GET /wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.90 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Sat, 29 Oct 2022 02:41:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"635c92d5-d01"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 18 Jun 2021 01:58:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"60cbfdd7-2bd8"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/yet-another-related-posts-plugin/style/related.css?ver=5.30.2
200 OK 177 B URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/yet-another-related-posts-plugin/style/related.css?ver=5.30.2
IP
File type ASCII text, with very long lines (307), with no line terminators
Hash 9997c87320c8c5de9477f2f3c03cac9b
ea9456e41000a7b3f135f3519254a3820d4ad558
85c22fad6c573a160a6098df59a16bb73727853e2d4965274540f714f8111959
GET /wp-content/plugins/yet-another-related-posts-plugin/style/related.css?ver=5.30.2 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: text/css
Last-Modified: Mon, 30 Jan 2023 08:23:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"63d77e91-133"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8dfa8fdcaac049e710a5cbb95bfc9341
29c78db8b24484ab1d187fe11898c163add8fc91
b5e6133fd5a48d60367a05ad80001b2aaca27c70c23b169bf8d6103b2279000a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5E6133FD5A48D60367A05AD80001B2AACA27C70C23B169BF8D6103B2279000A"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17071
Expires: Thu, 09 Feb 2023 04:11:54 GMT
Date: Wed, 08 Feb 2023 23:27:23 GMT
Connection: keep-alive
ritorika.com.ua/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 31 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 2eccf707201b564e5e0cc3637fe4fd79
13b3ab2c399a84808e8fd6a2c795a6a49f5090a4
fb2e62f5864ef969b2d586b0e589fc81d7689038cd54a90fbca4b463e0ca6261
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Sun, 18 Dec 2022 06:47:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb76b-15e54"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13
200 OK 1.1 kB URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13
IP
File type ASCII text, with very long lines (2608)
Hash 04b913c73869f0042ca5e809a2625022
a6a6b4ee0fb9ed7524808e53735dc497fa0344ea
ff62f94f514797a676a4785a80086785e63e261671e382d971c3c063a6325394
GET /wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Sun, 18 Dec 2022 06:47:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb783-a31"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.2.5
200 OK 2.5 kB URL HTTP/1.1 ritorika.com.ua/wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.2.5
IP
File type ASCII text, with very long lines (6834)
Hash d31ab4a903c510db8cf2214badd49e59
352d932bccc142723ab909ba8adb5880a099a59b
71d2e059e04c823d99f7d2b9ca05c60ed81c7f6b4b8a19e8535fa3a18a5e8441
GET /wp-content/themes/neve/assets/js/build/modern/frontend.js?ver=3.2.5 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 10 Jun 2022 04:34:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"62a2c9e1-1ab3"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-includes/js/comment-reply.min.js?ver=6.1.1
200 OK 1.4 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/js/comment-reply.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (2946)
Hash 28214bc78b9edfcfbc9c7b651fb4f56c
fb0847abdb33dd943a2dcda4c4b905fb5cdd116c
11691bc1acc1f3a7ab8ef7c67fb720ca58fb72e52f510009f7b0cbc2589d45e0
GET /wp-includes/js/comment-reply.min.js?ver=6.1.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 10 Jun 2022 04:27:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"62a2c846-ba5"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver=6.1.1
200 OK 5.7 kB URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver=6.1.1
IP
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (17738), with no line terminators
Hash 8190a40652f8c47e9da821cb5f3a425c
194dd721edd88e301979dec1c4eb5198b86e5b37
c7a5dabc057f71b7cb6c88db8fe6c472ffb7d01a08bd15b6264e649fabd6a887
GET /wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver=6.1.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Sun, 18 Dec 2022 06:47:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb783-454a"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ritorika.com.ua/wp-content/plugins/easy-fancybox/vendor/jquery.easing.min.js?ver=1.4.1
200 OK 767 B URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/easy-fancybox/vendor/jquery.easing.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (2301)
Hash c211a7b602db29a29133886dccf8e214
c01235d7e19052c5c7ebb15b0f4d0df5ba95f965
f3bf274ef145559149b535ef807df7b8c2c2de4ecc1207f8ea04410851e29bd8
GET /wp-content/plugins/easy-fancybox/vendor/jquery.easing.min.js?ver=1.4.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:23 GMT
Content-Type: application/x-javascript
Last-Modified: Sun, 18 Dec 2022 06:47:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"639eb783-8fe"
Expires: Wed, 15 Feb 2023 23:27:23 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 29073c7f231effb1e73a3c7324db3e93
9a216d254d97fa4012f0e9b31b3416b929cfd23b
b3c97748f9376ba4d6d52ae29551d29ccd9c2396f1ea5d768ea8cbc86a4bc445
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 12 Feb 2023 20:28:28 GMT
ETag: "9a216d254d97fa4012f0e9b31b3416b929cfd23b"
Last-Modified: Wed, 08 Feb 2023 20:28:29 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2456
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822befeaab511-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash df663fe7a0469fd70fc96e3d10f06e05
a32e326b1e488517443e9da815d9e9d5b281a01b
370e25041782091bad8606930c61e179d767ac1bc57b471f9dcf2e0de3820526
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:40:57 GMT
ETag: "a32e326b1e488517443e9da815d9e9d5b281a01b"
Last-Modified: Wed, 08 Feb 2023 19:40:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822befa52b4f4-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash df663fe7a0469fd70fc96e3d10f06e05
a32e326b1e488517443e9da815d9e9d5b281a01b
370e25041782091bad8606930c61e179d767ac1bc57b471f9dcf2e0de3820526
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:40:57 GMT
ETag: "a32e326b1e488517443e9da815d9e9d5b281a01b"
Last-Modified: Wed, 08 Feb 2023 19:40:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822bef9240b65-OSL
mpsuadv.ru/lib/custom/loader.js
200 OK 1.3 kB URL HTTP/1.1 mpsuadv.ru/lib/custom/loader.js
IP
Hash 938285a9be8d758ade9b8ea0a9d6aa69
6880cb0f8d574cce914484e4389c128172ce3c7c
1116e6a6f1d8d180c0a37d423c7a1aedcd9591959512b834babe428d24d428ce
GET /lib/custom/loader.js HTTP/1.1
Host: mpsuadv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 1346
Last-Modified: Tue, 03 Jan 2023 06:43:04 GMT
Connection: keep-alive
ETag: "63b3ce78-542"
Expires: Wed, 08 Feb 2023 23:27:24 GMT
Cache-Control: max-age=0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 23:14:52 GMT
age: 752
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash d00a2528156b7c889a754f2573a5f9a9
3e00c6750a64eb72d1c566e5d2ffadf566b1b6d0
536611c7cab68967ef652bf679d2fcc0d829b4ada87572973cb6e853b181d110
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4865
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:24 GMT
Last-Modified: Wed, 08 Feb 2023 22:06:19 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.sectigo.com/
200 OK 472 B IP
Hash bc87c517a242638d0f4d1239dc42f3b5
0787c5fc41c56c8fc0e919df5fa6f995f3add681
ffd2d6dcc9eb8de03ca1d322dffdb29bc10a1d887cd425debcd6a9e682917182
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 04:59:12 GMT
Expires: Wed, 15 Feb 2023 04:59:11 GMT
Etag: "0787c5fc41c56c8fc0e919df5fa6f995f3add681"
Cache-Control: max-age=537706,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822bf2f90b515-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 060f58deea8ae1a5a0b58dda0e1336ab
d452556bfdd0146409dc068b99ef1a7df3fd66de
c6a59884bc637830af233d7f9a9317b314b3f8b8ac2d5572505e71e876c78249
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 06 Feb 2023 12:07:33 GMT
Expires: Mon, 13 Feb 2023 12:07:32 GMT
Etag: "d452556bfdd0146409dc068b99ef1a7df3fd66de"
Cache-Control: max-age=390607,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822bf4fa3b515-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 060f58deea8ae1a5a0b58dda0e1336ab
d452556bfdd0146409dc068b99ef1a7df3fd66de
c6a59884bc637830af233d7f9a9317b314b3f8b8ac2d5572505e71e876c78249
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 06 Feb 2023 12:07:33 GMT
Expires: Mon, 13 Feb 2023 12:07:32 GMT
Etag: "d452556bfdd0146409dc068b99ef1a7df3fd66de"
Cache-Control: max-age=390607,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822bf6e75b500-OSL
cdn.adlook.me/js/vbf.js
200 OK 18 kB IP
ASN #199524 G-Core Labs S.A.
File type Unicode text, UTF-8 text, with very long lines (65509), with no line terminators
Hash d1431c442c89d049c45a1b63647951c5
19f97e2dae95eb591baa4bb6f544766cbaea721c
b5d7fd9d950630702ac1e61f4b49df964b850a8a523c322804859a5abc3f85c9
GET /js/vbf.js HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript,application/javascript;charset=utf-8
content-length: 18153
content-encoding: gzip
last-modified: Wed, 14 Dec 2022 11:05:53 GMT
etag: "807e2b8acfd91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-02-08T23:27:21+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 060f58deea8ae1a5a0b58dda0e1336ab
d452556bfdd0146409dc068b99ef1a7df3fd66de
c6a59884bc637830af233d7f9a9317b314b3f8b8ac2d5572505e71e876c78249
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 06 Feb 2023 12:07:33 GMT
Expires: Mon, 13 Feb 2023 12:07:32 GMT
Etag: "d452556bfdd0146409dc068b99ef1a7df3fd66de"
Cache-Control: max-age=390607,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822bf4f75b4fa-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a00f0fb4f970b3b333571521aa6337f5
ab5caa6a59db0d63835485ef6a60bdad281a1ca6
4541d35c70a8d84b036c9ef738ca4ed13969b21bc2718d32f19658018b7628e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4541D35C70A8D84B036C9EF738CA4ED13969B21BC2718D32F19658018B7628E0"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5278
Expires: Thu, 09 Feb 2023 00:55:22 GMT
Date: Wed, 08 Feb 2023 23:27:24 GMT
Connection: keep-alive
st03.kakprosto.ru/tumb/340/images/article/2014/1/27/1_52f5326bbefad52f5326bbf02c.jpg
200 OK 17 kB URL HTTP/1.1 st03.kakprosto.ru/tumb/340/images/article/2014/1/27/1_52f5326bbefad52f5326bbf02c.jpg
IP
ASN #200350 Yandex.Cloud LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 340x337, components 3\012- data
Hash 71a8c1eb3379cf6f5eebbe9569ef635c
4d135d431204e1b7ad7c0c56874f83d3e11d56a9
efdf15516c2f64a09f7d13c27aff1c8ec446855f340077706bcc201c4f4fd709
GET /tumb/340/images/article/2014/1/27/1_52f5326bbefad52f5326bbf02c.jpg HTTP/1.1
Host: st03.kakprosto.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: image/jpeg
Content-Length: 17096
Last-Modified: Fri, 07 Feb 2014 19:22:19 GMT
Connection: keep-alive
ETag: "52f5326b-42c8"
Expires: Thu, 08 Feb 2024 23:27:24 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 296381876718f68a6e4ac76bbc3239b3
317ff99019e434b455b4d51486b3c7caf24f8fc1
4ea9098a8f9457a9181f6ad75a5369b17f4140b67f22b340f3fbbcee5a30aa55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4EA9098A8F9457A9181F6AD75A5369B17F4140B67F22B340F3FBBCEE5A30AA55"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13741
Expires: Thu, 09 Feb 2023 03:16:25 GMT
Date: Wed, 08 Feb 2023 23:27:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7299
Expires: Thu, 09 Feb 2023 01:29:03 GMT
Date: Wed, 08 Feb 2023 23:27:24 GMT
Connection: keep-alive
www.acint.net/aci.js
200 OK 7.8 kB IP
File type ASCII text, with very long lines (1649)
Hash 777eef0db9280e74fe8d3e0e9561da9c
f8316623410b9735dd07b6e12a2f29352c0aa4cd
985dc8f4eb0a0b4629fa8e6d86f741ee8d22b7a0a1f64be2e9e9f2c96c9cf772
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/x-javascript
content-length: 7784
last-modified: Thu, 02 Feb 2023 13:54:08 GMT
etag: "63dbc080-1e68"
content-encoding: gzip
expires: Thu, 09 Feb 2023 11:27:24 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
ritorika.com.ua/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 5.0 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash 1b982d290af16dac5885f21a198aaa66
f847ca85d23c2f240938bbde0135f3de97925759
0b6e238cc0728a0bace390dfff472ff8bb5a5fd4714bcfcdac7c28621d67b8dc
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 10 Jun 2022 04:27:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=30
Vary: Accept-Encoding
ETag: W/"62a2c846-48b9"
Expires: Wed, 15 Feb 2023 23:27:24 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash 8a30a6ae2cef598dfd5bd3b074d3f2ee
64309464184784c3c55065c480ae8336c779a922
71880971b5e8fc6e2397258d1ec74d64d042f6e802abfaba6314ed1001a59984
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2766
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:24 GMT
Last-Modified: Wed, 08 Feb 2023 22:41:18 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 313 B IP
Hash f889f88135a58ae1a45385a264c5e817
c469d7e8cf84a01eda8e58b96643f0f0047900c4
5f590eec65b4a1c21ebccfdadfb977deeae3e5ecc8d1cc008cb064a0f68d5717
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4820
Cache-Control: max-age=142574
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:24 GMT
Etag: "63e3a6f6-139"
Expires: Fri, 10 Feb 2023 15:03:38 GMT
Last-Modified: Wed, 08 Feb 2023 13:43:18 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
ritorika.com.ua/wp-content/plugins/wp-postratings/images/stars/rating_over.gif
200 OK 523 B URL HTTP/1.1 ritorika.com.ua/wp-content/plugins/wp-postratings/images/stars/rating_over.gif
IP
File type GIF image data, version 89a, 12 x 12\012- data
Hash 00988ec60c7a0ed0e036851c9ec00dd6
8ffff7b5e7a8fa4827cab5f846d71fa1f62ea65b
71348f4f38512af6e6ba8062fe5545a783f91d1a07bcb300c246f1bad9b0d4b6
GET /wp-content/plugins/wp-postratings/images/stars/rating_over.gif HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
Cookie: adsplacerProReferrer=; adsplacerProCountry=Unknown; adsplacerProCity=Unknown
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: image/gif
Content-Length: 523
Last-Modified: Sat, 29 Oct 2022 02:41:25 GMT
Connection: keep-alive
Keep-Alive: timeout=30
ETag: "635c92d5-20b"
Expires: Fri, 10 Mar 2023 23:27:24 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
cdn.adlook.me/css/vbf.css?1.4
200 OK 1.6 kB URL HTTP/2 cdn.adlook.me/css/vbf.css?1.4
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (1557), with no line terminators
Hash 6173e26a1d606b386b5faf20a1ea78e9
86943c76f8258f88cb9a4b1efa5d3c65e36958ea
52e5cac2728efdec161b4dc096df103f98b83576dbee8d5e9c4cd8a3d610ab7c
GET /css/vbf.css?1.4 HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: text/css
content-length: 1557
last-modified: Fri, 08 Oct 2021 10:44:08 GMT
etag: "b69626c31bcd71:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-02-08T23:21:48+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.themoneytizer.com/moneybid7_35/build_noconsent/dist/prebid.js
200 OK 187 kB URL HTTP/2 ads.themoneytizer.com/moneybid7_35/build_noconsent/dist/prebid.js
IP
ASN #60068 Datacamp Limited
Size 187 kB (187139 bytes)
Hash 66d737c445f28706ea880beaaa9f08f3
a37b84b30db5ac23ba9762e311b150d1cba4ac02
10d38ae4e6ca71d7211140829eceeb13aba224530128f09755ac292565b9460a
GET /moneybid7_35/build_noconsent/dist/prebid.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
last-modified: Mon, 06 Feb 2023 22:22:07 GMT
expires: Thu, 09 Feb 2023 16:04:32 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-accel-expires: @1675958672
server: CDN77-Turbo
x-77-nzt: AblMCRTbBFL/zGcAAA
x-77-nzt-ray: af585630a068ba6cdc2fe4632e21f41d
x-cache: HIT
x-age: 26572
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f55b5de2cbb8ea55ca6050eac7d60709
ea272902464e9037b143f5c6c0253ddc81a27a78
f815579266f5cc67502efd0d6db662a628185132945ab67fac4ebceda2506bee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F815579266F5CC67502EFD0D6DB662A628185132945AB67FAC4EBCEDA2506BEE"
Last-Modified: Mon, 06 Feb 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9071
Expires: Thu, 09 Feb 2023 01:58:35 GMT
Date: Wed, 08 Feb 2023 23:27:24 GMT
Connection: keep-alive
onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1675898900872
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1675898900872
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=2a897e3f18e6769&cb=1675898900872 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1195%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1195%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1195%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDE2PkL9x/Swq82zQ3AuHf6ok4VGtJNnptPqcAixQVNNm4; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f55b5de2cbb8ea55ca6050eac7d60709
ea272902464e9037b143f5c6c0253ddc81a27a78
f815579266f5cc67502efd0d6db662a628185132945ab67fac4ebceda2506bee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F815579266F5CC67502EFD0D6DB662A628185132945AB67FAC4EBCEDA2506BEE"
Last-Modified: Mon, 06 Feb 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9071
Expires: Thu, 09 Feb 2023 01:58:35 GMT
Date: Wed, 08 Feb 2023 23:27:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b9abd03ef15f192e0e59c70a1494868
7a31dd96bad45c2c28bbf39ef6b1724c497a6f35
e80c50ae9cdc5d625f195448689fdd1d0d7ad30d0e0f776bfeb0c8ccb66e465b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E80C50AE9CDC5D625F195448689FDD1D0D7AD30D0E0F776BFEB0C8CCB66E465B"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7252
Expires: Thu, 09 Feb 2023 01:28:16 GMT
Date: Wed, 08 Feb 2023 23:27:24 GMT
Connection: keep-alive
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDE2PkL9x/UwrSu56jAtW7JlOLttV2UPq1kRGnz0u9GGvA; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDFWPkL9yCXgCceDgvAmhgyM5b4QUsic+UoVhPGlBDSQ6T; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDE2PkL9x/UwrSu56lAr/JPJW9nNCZR+WQHiSPC7h3kPsu; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
spl.zeotap.com/mapper.js?env=mWeb&eventType=pageview&zdid=1258
200 OK 22 kB URL HTTP/2 spl.zeotap.com/mapper.js?env=mWeb&eventType=pageview&zdid=1258
IP
File type Unicode text, UTF-8 text, with very long lines (50946), with LF, NEL line terminators
Hash 9da5c81a1af251272b3d178406510f08
6edfd0e7ae36ee6884cedba113c51a4ab15d94ef
635e143430778c845be2d614b2e51785cb68227224368919ed5b74a3e0330ea4
GET /mapper.js?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: http://ritorika.com.ua
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822c24e1d0b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.adlook.me/i/logo.png
200 OK 918 B IP
ASN #199524 G-Core Labs S.A.
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 54830642392ad6bc2eb1a44ebc6e33f6
4bc9dd2956b81b22baa3100a520c8737548ccdd6
0dabdf863ccc71f3106ade60bd889e406aba390270924456ffdeaa8a81a91ac0
GET /i/logo.png HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/png
content-length: 918
last-modified: Mon, 01 Apr 2019 13:37:01 GMT
etag: "bdd49bfc8fe8d41:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-02-08T23:21:28+00:00
x-id: fr5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A789813%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A789813%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A789813%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDFWPkL9yCXgCceDhZAgXz/LDij0+AXRfhOBq3iYKlU3AB; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
c.tmyzer.com/c/?s=88050&f=3&fi=99
200 OK 1 B URL HTTP/1.1 c.tmyzer.com/c/?s=88050&f=3&fi=99
IP
File type very short file (no magic)
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
GET /c/?s=88050&f=3&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:1321_36264064:01BB_63E42FDC_5FE83C2:23B58
X-IPLB-Instance: 24858
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A789813%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A789813%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A789813%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/oci.js?t=1675898900991
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/oci.js?t=1675898900991
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /oci.js?t=1675898900991 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/oci.js?t=1675898900991
www.acint.net/mc/?dp=14
302 Moved Temporarily 142 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=14
www.acint.net/hit/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=66883854&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=&rs=1280x1024&t=%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&oE=1&oP=1&dT=2023-02-08T23%3A28%3A20.988&fu=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=66883854&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=&rs=1280x1024&t=%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&oE=1&oP=1&dT=2023-02-08T23%3A28%3A20.988&fu=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=66883854&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=&rs=1280x1024&t=%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&oE=1&oP=1&dT=2023-02-08T23%3A28%3A20.988&fu=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=66883854&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=&rs=1280x1024&t=%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&oE=1&oP=1&dT=2023-02-08T23%3A28%3A20.988&fu=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a
p.cpx.to/p/12769/px.js
200 OK 2.0 kB IP
File type ASCII text, with very long lines (1990), with no line terminators
Hash 131d94810a545ebbd4985acba94d4517
cd5e521409be537defd02fee11ff404f17b6a0d7
add592dac6cfc4d453de5abc93eaea13c17dfec3e872069a0576bdae7e0bdf2a
GET /p/12769/px.js HTTP/1.1
Host: p.cpx.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
cache-control: max-age=2419200, public
content-type: application/javascript; charset=UTF-8
date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Length: 1990
Connection: keep-alive
tag.leadplace.fr/libJsLP.js
200 OK 5.5 kB URL HTTP/1.1 tag.leadplace.fr/libJsLP.js
IP
Hash a0c24f993bc0901cfe62d1e801cb2b45
7eb2bdce06161ae486bc8e7ecd0b5c9c4f7b2984
80fccb00db57a177d26368cda09f8a540cf1aa641b8b6837047e86d3bd8d6333
GET /libJsLP.js HTTP/1.1
Host: tag.leadplace.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/javascript
Content-Length: 5547
Last-Modified: Thu, 14 Oct 2021 07:27:52 GMT
ETag: "6167dbf8-15ab"
Accept-Ranges: bytes
X-IPLB-Request-ID: 5B5A2A9A:A970_91EFC0A6:01BB_63E42FDC_6F0212E4:237B7
X-IPLB-Instance: 30195
c.tmyzer.com/c/?s=88050&f=11&fi=99
200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=88050&f=11&fi=99
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=88050&f=11&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:3596_36264064:01BB_63E42FDC_5FD868E:29EFE
X-IPLB-Instance: 38431
ritorika.com.ua/wp-content/uploads/2021/06/cropped-word-1.jpg
200 OK 2.9 kB URL HTTP/2 ritorika.com.ua/wp-content/uploads/2021/06/cropped-word-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x31, components 3\012- data
Hash 9e61fdc3d42dc8a8c27be051f52b7c67
f5adf592f0362d57e3bff7f093b86a0bb297431b
49cb99c73fac4a56f83f1b252c3453960502f258fa38a5301489d5721d31f0ee
GET /wp-content/uploads/2021/06/cropped-word-1.jpg HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/jpeg
content-length: 2932
last-modified: Sat, 09 Jul 2022 05:22:24 GMT
etag: "62c91090-b74"
expires: Fri, 10 Mar 2023 23:27:24 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CKq48ZW7R9PK6ULn0pMo/A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UO5WIOdlewnjActFslE9xmrPoUo=
c.tmyzer.com/c/?s=88050&f=19&fi=99
200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=88050&f=19&fi=99
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=88050&f=19&fi=99 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:C687_36264064:01BB_63E42FDC_5FDC230:2C9BA
X-IPLB-Instance: 20686
www.acint.net/hit/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=66883854&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=&rs=1280x1024&t=%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&oE=1&oP=1&dT=2023-02-08T23%3A28%3A20.988&fu=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a
200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=66883854&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=&rs=1280x1024&t=%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&oE=1&oP=1&dT=2023-02-08T23%3A28%3A20.988&fu=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=66883854&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=&rs=1280x1024&t=%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&oE=1&oP=1&dT=2023-02-08T23%3A28%3A20.988&fu=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
308 Permanent Redirect 104 B URL HTTP/1.1 spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
IP
File type HTML document, ASCII text
Hash f6374de2b16ca49a4b7f2c19227141a2
9a63b26916d675ec764c2d6fdf991052c3fdcd4f
f5042dc89e970724b5778beea2fa613e4ca930c45dfa1dfb510bbba968c2cdbe
GET /?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 308 Permanent Redirect
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: http://ritorika.com.ua
Location: https://spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
Vary: Origin
Via: 1.1 google
CF-Cache-Status: DYNAMIC
Server-Timing: cf-q-config;dur=7.0000005507609e-06
Server: cloudflare
CF-RAY: 796822c35f6cb4fd-OSL
ocsp.digicert.com/
200 OK 280 B IP
Hash 250af63d7e6c49cccc7d4ba72264b38e
b520d25c4fdff0cf2c1b75d6aac485e865c76ee0
74b1b19b197656e8956e90f4a6547dd40f8a0810d843afde90fdba611556b838
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5087
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:24 GMT
Last-Modified: Wed, 08 Feb 2023 22:02:37 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b67850e3b3e13edebbd556f007617b39
f87b768ae3edea0649975ffe2dde53507cf7ef9e
5d2f919c5deae902674f2fec6fde833cd1286566566f9c70c2779edd789d08fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D2F919C5DEAE902674F2FEC6FDE833CD1286566566F9C70C2779EDD789D08FB"
Last-Modified: Tue, 07 Feb 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14124
Expires: Thu, 09 Feb 2023 03:22:48 GMT
Date: Wed, 08 Feb 2023 23:27:24 GMT
Connection: keep-alive
script.4dex.io/localstore.js
200 OK 268 B URL HTTP/1.1 script.4dex.io/localstore.js
IP
File type ASCII text, with very long lines (482)
Hash 58fe1f2623397cca72ecea6ee95d76b9
ac4d33ae761cf330574597936273a9c5d82f96d0
7cb0b5944c53bbacc5983fbef96aa0c1f514ec12da81666765610eae562a9020
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Wed, 23 Nov 2022 15:43:18 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 470156
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WHMMAfMkqDLyA5ujE4aFIjVijU0pQO5lgA%2ByxIL6OwHW8WoqcDXaBpWl4%2F64Sb4gRDCzU8ka2p3cRXM48p%2FXL3rQ%2BTuSb3PW43pVPKENelHQeMe38BM52q%2FR1BEmI3R%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 796822c48f55b529-OSL
Content-Encoding: br
id5-sync.com/api/config/prebid
200 134 B URL HTTP/1.1 id5-sync.com/api/config/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99be75395b3c89cdd6781761e5a85ad2
225a8b587c3545be2581aa9ac2b630b51679d7be
559ffc5fa5eadd77f8bfaaeb793648763e312a17391d8e6bbb7d8d3dec2147e1
POST /api/config/prebid HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 95
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Wed, 08 Feb 2023 23:27:24 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
www.acint.net/pxl/1?dp=16&id=123876.702325.164153540.0.0.86&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=123876.702325.164153540.0.0.86&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=123876.702325.164153540.0.0.86&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898901 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=1303420ADC2FE463BC0A4B7F027C34DB
204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=1303420ADC2FE463BC0A4B7F027C34DB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:24 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=8c6faae51552b0c58545; Expires=Thu, 08 Feb 2024 23:27:23 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 529
x-xss-protection: 1; mode=block
access-control-allow-origin: https://www.acint.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 8e109baddb22b573a373457259aac9ac
f5f95ff6171d3cb8b274fa8c1eb361a98faaf423
f6d6b1beb6eb4837871a5b74c2f74ef9d1fc27b9f86b4eeba62c43cebf8914a3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3217
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:25 GMT
Last-Modified: Wed, 08 Feb 2023 22:33:48 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 314
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=2503420ADD2FE4631B00CF54026C7D36
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDJWPkL91UzwAbNn1sAoNdyTgIGcjqbpMwDDjo1IEDUaxy; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ocsp.digicert.com/
200 OK 314 B IP
Hash 8e109baddb22b573a373457259aac9ac
f5f95ff6171d3cb8b274fa8c1eb361a98faaf423
f6d6b1beb6eb4837871a5b74c2f74ef9d1fc27b9f86b4eeba62c43cebf8914a3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3217
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:25 GMT
Last-Modified: Wed, 08 Feb 2023 22:33:48 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 314
sync.upravel.com/sape/sync
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1675898845028;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1675898845028;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901403
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901403
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901403 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=3b4b7fa93e9d42a9a3fe6cc206547700; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:24 GMT
content-length: 2
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8528a1bcaf825fe869f32422379eab15
0d77ee6b4d2eecdddb27054cd4af234ae2ad138d
3db77565df6a6ab4865d2b03c9444f47f6e1f9e06c8455e1b81aa8d87c03da30
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4962
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:25 GMT
Last-Modified: Wed, 08 Feb 2023 22:04:43 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901402
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901402
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901402 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=7c532f6d82a1499a92efddab0fd28e8c; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:24 GMT
content-length: 2
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 73843c329db11f155819b59ef21f7e36
0c73fbef5c1553461c1f76f02f8a5e3ee162652c
3758a4c6681195da5e4faf336c530ad76e0939ee2a3ae7ca6304e6c376a7cb4e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3758A4C6681195DA5E4FAF336C530AD76E0939EE2A3AE7CA6304E6C376A7CB4E"
Last-Modified: Tue, 07 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18962
Expires: Thu, 09 Feb 2023 04:43:27 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b00de998e6b04da4b4a69876e4569dc3
7d7c243111330100ebbc58ad74b434645bc2a1f9
777909cc8c778c8c3747af62b97e8eeea54261681c921906c14d5629352bc986
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "777909CC8C778C8C3747AF62B97E8EEEA54261681C921906C14D5629352BC986"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Thu, 09 Feb 2023 00:07:00 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
ritorika.com.ua/wp-includes/js/thickbox/loadingAnimation.gif
200 OK 15 kB URL HTTP/1.1 ritorika.com.ua/wp-includes/js/thickbox/loadingAnimation.gif
IP
File type GIF image data, version 89a, 416 x 26\012- data
Hash ce2268030dd2151b63cdf4ffc2f626ba
15280f21eb43f5fa7838dcf011f67d79e301b15f
6a486bb6036ea984d293ab009566e99e522abc19f8833c5fd49630be7eba0135
GET /wp-includes/js/thickbox/loadingAnimation.gif HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/rukovodstvo/31/chto-znachit-razdaetsja-v-torrente-i-chto-delat
Cookie: adsplacerProReferrer=; adsplacerProCountry=Unknown; adsplacerProCity=Unknown; fid=db9dc8aa-91f9-4d2e-b12d-9392fbcbad7a; _pbjs_userid_consent_data=3524755945110770; sharedid=ffcd166b-88e1-464b-b032-fb753990118c
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/gif
Content-Length: 15238
Last-Modified: Fri, 18 Jun 2021 01:44:08 GMT
Connection: keep-alive
Keep-Alive: timeout=30
ETag: "60cbfa68-3b86"
Expires: Fri, 10 Mar 2023 23:27:25 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
a.utraff.com/sync?ssp=Sape
204 No Content 0 B URL HTTP/2 a.utraff.com/sync?ssp=Sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=Sape HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Sat, 11 Mar 2023 02:27:25 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Sat, 11 Mar 2023 02:27:25 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2T0y6jp4M8t6HNlUFMGNn9mo00%2FrTYJsnqDKwo8C9GvcoNZCSX%2Bk1eHsSKX5l1gQwFrcYPFrosfdTLTgtOh5Hv98nFVouGv5cPnIuP7%2B3f8jnRakDeA87MQkzCnaOak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 796822c5dc25b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash eb65a9f99827e9ad8ad356fd88611ee6
503fb3e486dac3bd1ee463a6a8f94556dd229c44
b8092d4dc825b0e4815270b83c9a25474bf95e725c404e7bfb70e0fa9b296e07
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 12 Feb 2023 21:19:36 GMT
ETag: "503fb3e486dac3bd1ee463a6a8f94556dd229c44"
Last-Modified: Wed, 08 Feb 2023 21:19:37 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3565
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c60995b4f4-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a83b21ef04ca3030e0cae604ebf82fb
0edd4e2ed3767c5a0b7215b02f0ec231e020a542
639c03611bba24f7cdb1e91b821117001bbf1f050fde9e59bbc5b424864e0040
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "639C03611BBA24F7CDB1E91B821117001BBF1F050FDE9E59BBC5B424864E0040"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8388
Expires: Thu, 09 Feb 2023 01:47:13 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901404
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901404
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898901404 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=515053b996514968ad14523af2da9e12; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:24 GMT
content-length: 2
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c3c2994e7225dc0d90f6295301e623f
d9228db223a7b20a5527c27a746941569557470c
be763cf9d94707378fe06da0d0b12817abf0601d0982c70ebfff3d0d92f0c173
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE763CF9D94707378FE06DA0D0B12817ABF0601D0982C70EBFFF3D0D92F0C173"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9298
Expires: Thu, 09 Feb 2023 02:02:23 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 74 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
File type HTML document, ASCII text
Hash e83dadb2518ec35ade9b138590b0f570
d1a99c6220d31ee3004e8be2487519e25dc98eef
c266f49477a2f62cd08a015bdb917456b655367f583846b32405db21e9949ea7
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 74
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=SXEIRDDR
Set-Cookie: uid=SXEIRDDR; Expires=Sat, 05 Feb 2033 23:27:25 GMT
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420ADC2FE463BC0A4B7F027C34DB
200 OK 12 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420ADC2FE463BC0A4B7F027C34DB
IP
File type exported SGML document, ASCII text, with no line terminators
Hash d8932e1cb3ee147415fbf5591a7217ca
97da5b95fb7f60ecd8d9ed0e5a05d83ad5a9c070
c0327cbcde50f1ab8228334a550b947301123d6f6f7d625707cb6d08a1faec35
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: text/html
content-length: 12
last-modified: Mon, 30 Jan 2023 18:57:34 GMT
etag: "63d8131e-c"
accept-ranges: bytes
server: elb
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c3c2994e7225dc0d90f6295301e623f
d9228db223a7b20a5527c27a746941569557470c
be763cf9d94707378fe06da0d0b12817abf0601d0982c70ebfff3d0d92f0c173
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE763CF9D94707378FE06DA0D0B12817ABF0601D0982C70EBFFF3D0D92F0C173"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9298
Expires: Thu, 09 Feb 2023 02:02:23 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1675898845028
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=ab9aea0c-27ac-4149-b433-9669c9101ad8;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=ab9aea0c-27ac-4149-b433-9669c9101ad8;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=ab9aea0c-27ac-4149-b433-9669c9101ad8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c222bfa4b0cb3c187cb39c1fce5bf70
3550f5efb523ab2f5347629fa7176a688b43566a
4081f0ce9bc9ba3012da201f0b6f69fa7147b77fea1a46b7aeb668e0356b68fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4081F0CE9BC9BA3012DA201F0B6F69FA7147B77FEA1A46B7AEB668E0356B68FE"
Last-Modified: Wed, 08 Feb 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9423
Expires: Thu, 09 Feb 2023 02:04:28 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
s.uuidksinc.net/match/396/?remote_uid=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=zZitlS8XnEkzPV0vpqCU
set-cookie: jcsuuid=zZitlS8XnEkzPV0vpqCU; expires=Thu, 08 Feb 2024 23:27:25 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/check?sspuid=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
acint.net/match?dp=14&euid=2503420ADD2FE4631B00CF54026C7D36
200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=2503420ADD2FE4631B00CF54026C7D36
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=2503420ADD2FE4631B00CF54026C7D36 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&uid=1303420ADC2FE463BC0A4B7F027C34DB
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNGZjY2VkZS1hODA4LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Tue, 03 Feb 2043 23:27:25 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjd35CfBmIgMTMwMzQyMEFEQzJGRTQ2M0JDMEE0QjdGMDI3QzM0REKiARAk_M7eqAgR7YbgACWQwGR8
ETag: 24fccede-a808-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
sync.dmp.otm-r.com/match/sape?id=1303420ADC2FE463BC0A4B7F027C34DB
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.17.4
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/data/?callback=sapeRTB_63e430156_19695220&srtbid=123876&scids=164153540&sx=1268&sy=939&ref=&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&allimps=0&fl=0&v=3&tz=%2B00%3A00
200 OK 50 B URL HTTP/1.1 ssp-rtb.sape.ru/data/?callback=sapeRTB_63e430156_19695220&srtbid=123876&scids=164153540&sx=1268&sy=939&ref=&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&allimps=0&fl=0&v=3&tz=%2B00%3A00
IP
File type ASCII text, with no line terminators
Hash 92cff3fc7d20d0655de0e88b1e31577e
5bf129dfdf3104e9d8f9ffe61b6061dd227f2a54
9807a9f0a82ce0e53d9c4ee52f35c6d75f0463bc92f5044061c096825c36cd9e
GET /data/?callback=sapeRTB_63e430156_19695220&srtbid=123876&scids=164153540&sx=1268&sy=939&ref=&u=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&allimps=0&fl=0&v=3&tz=%2B00%3A00 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Content-Encoding: gzip
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDIWPkL92gvgAbPkW3AsoYPF35Xz76RhimDH5g9XgskayE; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ssp-rtb.sape.ru/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1034
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: sspuid=CkIDJWPkL91UzwAbNn1sAoNdyTgIGcjqbpMwDDjo1IEDUaxy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8c08fb51d8af718a83f70374f887ee2
76f0f7129301c21abf06fc45d27a723f01f98839
a754700f1a67a4d9e2d1767014b50ee98da60a5f3f3b7755ca5d173fcf4247a0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A754700F1A67A4D9E2D1767014B50EE98DA60A5F3F3B7755CA5D173FCF4247A0"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8781
Expires: Thu, 09 Feb 2023 01:53:46 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
kvt.sddan.com/api/v1/public/p/29567/d/50/s?callback=&gdpr=&gdpr_consent=&url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat
200 OK 148 B URL HTTP/1.1 kvt.sddan.com/api/v1/public/p/29567/d/50/s?callback=&gdpr=&gdpr_consent=&url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat
IP
File type JSON data\012- , ASCII text, with very long lines (507), with no line terminators
Hash 867d8ac79fb483c1b9a76ffa51be7e2e
0178e99b8e387aee2e5d068304c7a8689d9e05de
e8266673e1120bbdd037e69160b04885449d8fe91c1069321cc79d4161098d2a
GET /api/v1/public/p/29567/d/50/s?callback=&gdpr=&gdpr_consent=&url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat HTTP/1.1
Host: kvt.sddan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: http://ritorika.com.ua
Cache-Control: private, max-age=60
Strict-Transport-Security: max-age=15724800; includeSubDomains; preload
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 471 B IP
Hash c3e6b252bbc44111304c3fed42c31e66
0a1a36870153604bc980fe480dd99ba494268f1e
e2a1280629dd810859daec5a7493410f87bbe52f9cd7e20aafda7d9cd5114b15
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 15:41:08 GMT
Expires: Tue, 14 Feb 2023 15:41:07 GMT
Etag: "0a1a36870153604bc980fe480dd99ba494268f1e"
Cache-Control: max-age=489821,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822c5ad76b515-OSL
nr.bidderstack.com/sape/cm?user_id=1303420ADC2FE463BC0A4B7F027C34DB
200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Access-Control-Allow-Credentials: true
ssp-rtb.sape.ru/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1033
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: sspuid=CkIDJWPkL91UzwAbNn1sAoNdyTgIGcjqbpMwDDjo1IEDUaxy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
sync.dmp.otm-r.com/match/aotm.js
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/aotm.js
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/aotm.js HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.17.4
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1034
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: sspuid=CkIDJWPkL91UzwAbNn1sAoNdyTgIGcjqbpMwDDjo1IEDUaxy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
ocsp.globalsign.com/alphasslcasha256g4
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/alphasslcasha256g4
IP
Hash b203de40e99eb1595dc0de88599ca90e
fc36c7258db3db5bfb7a8071791975b741c56fca
95fe8fb8887279e0270e12795dc2d16c5b552e70c88b1a5bfd50ba2c5f41bfbd
POST /alphasslcasha256g4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1437
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:30:09 GMT
ETag: "fc36c7258db3db5bfb7a8071791975b741c56fca"
Last-Modified: Wed, 08 Feb 2023 19:30:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 778
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c75dccb511-OSL
ssp-rtb.sape.ru/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1032
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: sspuid=CkIDIWPkL92gvgAbPkW3AsoYPF35Xz76RhimDH5g9XgskayE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 690f11719ed1e62a278cd5697b382734
6cac5bf6f0368375e993be02e4783fa765c1de46
7aa15b3a3cb48ed1775e469a890b9ddda22361d7089b44f9f57739338c423fd7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7AA15B3A3CB48ED1775E469A890B9DDDA22361D7089B44F9F57739338C423FD7"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7709
Expires: Thu, 09 Feb 2023 01:35:54 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
match.new-programmatic.com/userbind?src=sape&id=1303420ADC2FE463BC0A4B7F027C34DB
204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=1303420ADC2FE463BC0A4B7F027C34DB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
www.acint.net/match?dp=95&euid=SXEIRDDR
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=SXEIRDDR
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=SXEIRDDR HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 97784f138e2cfb5c74c148bc541e3933
62dc81bb108935d478d7e210cb846e2ec88e520e
a22bbbe647b48f4870cc19715fa3b58352541f6e0485822f7f7bd823320cbb34
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=c129f320-6244-4483-425d-887d72fd78c5
serverid: TODO
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=ab9aea0c-27ac-4149-b433-9669c9101ad8
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=ab9aea0c-27ac-4149-b433-9669c9101ad8
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=ab9aea0c-27ac-4149-b433-9669c9101ad8 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 9b73c68105e59bfb9bcc5bb74d74f3f0
cdb401bf423b893cb4fc2653c9ac21b7fa08ca2b
f0e9fca5840e496a1469d1745f8882d02152c69c0becaf6de3da0ccb2236bc53
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 12 Feb 2023 22:05:34 GMT
ETag: "cdb401bf423b893cb4fc2653c9ac21b7fa08ca2b"
Last-Modified: Wed, 08 Feb 2023 22:05:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3168
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c78e0ab511-OSL
www.acint.net/pxl/1?dp=16&id=123876.702326.164153549.0.0.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=123876.702326.164153549.0.0.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=123876.702326.164153549.0.0.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 506d17506718e4d2ce115b778f4729d4
a7e3af3c0c34d3712810f2adf3092d49090dcba0
c7930a4daaf913e64b610b55cd2f9d9290f7278b22021428b9649e581d1d90e2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 23:11:01 GMT
Expires: Tue, 14 Feb 2023 23:11:00 GMT
Etag: "a7e3af3c0c34d3712810f2adf3092d49090dcba0"
Cache-Control: max-age=516814,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822c68dfbb515-OSL
www.acint.net/match?dp=127&euid=zZitlS8XnEkzPV0vpqCU
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=zZitlS8XnEkzPV0vpqCU
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=zZitlS8XnEkzPV0vpqCU HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 1d9fbcebd98a6415c7c3c653e1d463a8
904d7bda5d472632a16759fbc13fc29980b39966
1f7e4ad1a7cc362366747bd0100394c1dd8e2f9e80c218526fb3ab882e3a862e
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 12 Feb 2023 21:33:54 GMT
ETag: "904d7bda5d472632a16759fbc13fc29980b39966"
Last-Modified: Wed, 08 Feb 2023 21:33:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2530
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c7beb00b65-OSL
cs.agency2.ru/p?ssp=sp&uid=1303420ADC2FE463BC0A4B7F027C34DB
301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=1303420ADC2FE463BC0A4B7F027C34DB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=f7bdb9ee-9dc8-40a2-9e91-55b9ec5d7c29
Set-Cookie: uuid=f7bdb9ee-9dc8-40a2-9e91-55b9ec5d7c29; expires=Tue, 30 Jan 2024 23:27:25 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
ad.adriver.ru/cgi-bin/json.cgi?sid=1&ad=719473&bt=55&pid=3198680&bid=7189165&bn=7189165&tuid=1
200 OK 385 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/json.cgi?sid=1&ad=719473&bt=55&pid=3198680&bid=7189165&bn=7189165&tuid=1
IP
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash b32e9cef22cf51cd0f8f372e83fad097
53b1bb4287799ed0d422109bdf0adc4edbb62e4c
ad22022d13819a9bd1b9ed7cde0935c2e5d4a02addfbf1d440265305b8dbb4d4
GET /cgi-bin/json.cgi?sid=1&ad=719473&bt=55&pid=3198680&bid=7189165&bn=7189165&tuid=1 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=ARQMUsKi9isIapxqnA5GvNA; expires=Fri, 07 Feb 2025 23:27:25 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
cs.alfasense.com/pixeljs
502 Bad Gateway 150 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 2b027182dd680c922c2045072dad573c
56174f4e4b971b7b25f06b65f6c299d028ec3f14
61b30d408583991fd69f3dec694e154cb652471e663328ad9c8482c9021ab5db
GET /pixeljs HTTP/1.1
Host: cs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 502 Bad Gateway
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: text/html
Content-Length: 150
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
www.acint.net/match?dp=126&euid=c129f320-6244-4483-425d-887d72fd78c5
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=c129f320-6244-4483-425d-887d72fd78c5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=c129f320-6244-4483-425d-887d72fd78c5 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 333dfbfc19c8e5423544b0fc890ff987
f2204fd5683a68d0b0da5415a22ef60cfef62f8e
bc9dc6da7ca825183bdbfe9bbbdd464954b984490a1de62a6f0b6e0f427fbfc7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BC9DC6DA7CA825183BDBFE9BBBDD464954B984490A1DE62A6F0B6E0F427FBFC7"
Last-Modified: Tue, 07 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7357
Expires: Thu, 09 Feb 2023 01:30:02 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
sync.gonet-ads.com/match/sape.js?id=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 0 B URL HTTP/2 sync.gonet-ads.com/match/sape.js?id=1303420ADC2FE463BC0A4B7F027C34DB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape.js?id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/javascript
content-length: 0
location: https://sync.gonet-ads.com/match/sape.js?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
200 OK 23 kB IP
File type ASCII text, with very long lines (65354)
Hash 0ffb2c9b6dd933ae18ab7dc729d58e69
bb88b2f3fc47452873348d1cdcb7ea3d4a2bbc10
0cd0e55fa43693dfe4b04a225bf7774eb3f66e232828f8d661547728475a12f2
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"c56b6332dacf72f135afcd153ae22448"
Last-Modified: Wed, 23 Nov 2022 15:43:17 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8SWZoqM5MSw40skmUNHBnYf4947hTytKB3piFRk7DEE0EsGdBoqOjIh%2BKC3oK72bnIRi50T0epFKy0nqWuVqcfwQqIF8Ku%2B8Rh9puuURO4u8mH6GOPHXzTEb5XC6V6K6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 796822c75b2eb4f4-OSL
Content-Encoding: br
s.alfasrv.com/events/1x1.png?s=29868&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29868&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29868&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=29863&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29863&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29863&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=28760&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=28760&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=28760&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
s.alfasrv.com/events/1x1.png?s=29866&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29866&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29866&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
www.acint.net/match?dp=186&euid=f7bdb9ee-9dc8-40a2-9e91-55b9ec5d7c29
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=f7bdb9ee-9dc8-40a2-9e91-55b9ec5d7c29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=f7bdb9ee-9dc8-40a2-9e91-55b9ec5d7c29 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=29867&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29867&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29867&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=28760&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=28760&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=28760&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29867&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29867&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29867&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
s.alfasrv.com/events/1x1.png?s=29865&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29865&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29865&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=29864&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29864&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29864&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
sync.adspend.space/sape?uid=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 149 B URL HTTP/2 sync.adspend.space/sape?uid=1303420ADC2FE463BC0A4B7F027C34DB
IP
File type HTML document, ASCII text
Hash 849f49a8af4a6babb5c3ed55be8c9358
ab073c44f1bba3b5a3bee32d90efdf7aaeabda43
0009b93db902c916fcc4600f5a33e74afd5e30c7bbdd86f7360b2ef41264f104
GET /sape?uid=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: text/html; charset=utf-8
content-length: 149
location: https://sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D8a89514b-bfb6-45fc-848b-deda9fe99b0e
set-cookie: as-user=8a89514b-bfb6-45fc-848b-deda9fe99b0e; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 284
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: vid=8c6faae51552b0c58545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8528a1bcaf825fe869f32422379eab15
0d77ee6b4d2eecdddb27054cd4af234ae2ad138d
3db77565df6a6ab4865d2b03c9444f47f6e1f9e06c8455e1b81aa8d87c03da30
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4962
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:25 GMT
Last-Modified: Wed, 08 Feb 2023 22:04:43 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sape
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNGZjY2VkZS1hODA4LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNGZjY2VkZS1hODA4LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Tue, 03 Feb 2043 23:27:25 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=24fccede-a808-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
v.alfasrv.com/stats/2x2.png?s=29865&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29865&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29865&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
ocsp.globalsign.com/alphasslcasha256g4
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/alphasslcasha256g4
IP
Hash 33c5b490c00ed0998932b6a9b806f691
e693089095fe0b42b03ef78d512ac6c20097f4f0
8e5856d2df2a125c027555a03f54fb69952322f79f75fbcf3cb59af4654186be
POST /alphasslcasha256g4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1437
Connection: keep-alive
Expires: Sun, 12 Feb 2023 20:56:29 GMT
ETag: "e693089095fe0b42b03ef78d512ac6c20097f4f0"
Last-Modified: Wed, 08 Feb 2023 20:56:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c8aefcb511-OSL
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 284
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: vid=8c6faae51552b0c58545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29864&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29864&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29864&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 6806f6e7356e50c48fd35b804e94ad02
32e3a263f073d65437f0c6baed97a29e6651b648
b2a6cb4bab6c56734b21f24b6255055f670a4d233eea68be875a860d8ac22fff
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:34:01 GMT
ETag: "32e3a263f073d65437f0c6baed97a29e6651b648"
Last-Modified: Wed, 08 Feb 2023 19:34:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2530
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c8cc6cb4f4-OSL
sync.bumlam.com/?src=sap1&s_data=CAIQARjd35CfBmIgMTMwMzQyMEFEQzJGRTQ2M0JDMEE0QjdGMDI3QzM0REKiARAk_M7eqAgR7YbgACWQwGR8
200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjd35CfBmIgMTMwMzQyMEFEQzJGRTQ2M0JDMEE0QjdGMDI3QzM0REKiARAk_M7eqAgR7YbgACWQwGR8
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjd35CfBmIgMTMwMzQyMEFEQzJGRTQ2M0JDMEE0QjdGMDI3QzM0REKiARAk_M7eqAgR7YbgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNGZjY2VkZS1hODA4LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNGZjY2VkZS1hODA4LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Tue, 03 Feb 2043 23:27:25 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 284
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: vid=8c6faae51552b0c58545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29866&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29866&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29866&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 60d04593623b43137e09b60873001781
0816a6cdd13954cbf0608e7d3864b563d94c5f32
fe1e6c6fa74ea8cd13f9bc9fa2f3d38371a4aa0f20af20b96fa521680653c139
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE1E6C6FA74EA8CD13F9BC9FA2F3D38371A4AA0F20AF20B96FA521680653C139"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2255
Expires: Thu, 09 Feb 2023 00:05:00 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
pix.bumlam.com/sync/sape/sync_ok?guid=24fccede-a808-11ed-86e0-002590c0647c
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=24fccede-a808-11ed-86e0-002590c0647c
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=24fccede-a808-11ed-86e0-002590c0647c HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNGZjY2VkZS1hODA4LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://24fccede-a808-11ed-86e0-002590c0647c.n3.sync.bumlam.com/?src=sape
sync.programmatica.com/match/RTBSape?id=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 0 B URL HTTP/2 sync.programmatica.com/match/RTBSape?id=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/RTBSape?id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sync.programmatica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 0
location: https://sync.programmatica.com/match/RTBSape?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
sync.gonet-ads.com/match/sape.js?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1
200 OK 1.7 kB URL HTTP/2 sync.gonet-ads.com/match/sape.js?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1
IP
Hash ae13ccc9f9dc1af174065ec4c7a93816
774eb622d669517c83c1a19af141d6db6643c30c
7c573e5154a7b2480fea51be08a9697fbfe39bd6e506d4d88bd9a61b7fcf974a
GET /match/sape.js?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1 HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/javascript
vary: Accept-Encoding
set-cookie: pid=N2ExOWM1NDNmZThkZjE1Mw; expires=Thu, 08 Feb 2024 23:27:25 GMT; domain=.gonet-ads.com; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a00d71c8c67f545524a5ed25652b1265
b8b9d056d128728710353e6a4beeb3098f9222ad
17ecb250ed20c5ea5f0f15e94cf89277d81c99235a28c3ad04f3f23f5212c08a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 02:03:28 GMT
Expires: Wed, 15 Feb 2023 02:03:27 GMT
Etag: "b8b9d056d128728710353e6a4beeb3098f9222ad"
Cache-Control: max-age=527161,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822c8efb1b4fa-OSL
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=18f80313eef1f6e8&transactionid=b417306f-b40e-4770-b3bb-0e4ab2463539&auctionid=577ee8b4-cd81-4e98-9829-3d39cc0eae89&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=18f80313eef1f6e8&transactionid=b417306f-b40e-4770-b3bb-0e4ab2463539&auctionid=577ee8b4-cd81-4e98-9829-3d39cc0eae89&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=18f80313eef1f6e8&transactionid=b417306f-b40e-4770-b3bb-0e4ab2463539&auctionid=577ee8b4-cd81-4e98-9829-3d39cc0eae89&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwNTg1MDA4NQ==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D8a89514b-bfb6-45fc-848b-deda9fe99b0e
302 Found 102 B URL HTTP/2 sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D8a89514b-bfb6-45fc-848b-deda9fe99b0e
IP
File type HTML document, ASCII text
Hash ebb63de51be5c1c1b9fb88e4d9b3bc2f
c640ea81f96654c2b445de39fb20fb16adf7f170
2d8d8cd01a01a29aa9d30b6b1119285319dc74c434ad831557ccea5b57b4dd7a
GET /check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D8a89514b-bfb6-45fc-848b-deda9fe99b0e HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: as-user=8a89514b-bfb6-45fc-848b-deda9fe99b0e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: text/html; charset=utf-8
content-length: 102
location: https://www.acint.net/match?dp=98&euid=8a89514b-bfb6-45fc-848b-deda9fe99b0e
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash f19fc144e654e370fe4f5116889f6e50
29d736a59928b5022ff38658492b66934ca419de
468f63a07d61df0165902062c34756afed0ecdee92166c88a252083905a7706b
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:49:39 GMT
ETag: "29d736a59928b5022ff38658492b66934ca419de"
Last-Modified: Wed, 08 Feb 2023 19:49:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2967
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c93f79b511-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash a00d71c8c67f545524a5ed25652b1265
b8b9d056d128728710353e6a4beeb3098f9222ad
17ecb250ed20c5ea5f0f15e94cf89277d81c99235a28c3ad04f3f23f5212c08a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 02:03:28 GMT
Expires: Wed, 15 Feb 2023 02:03:27 GMT
Etag: "b8b9d056d128728710353e6a4beeb3098f9222ad"
Cache-Control: max-age=527161,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822c80df8b500-OSL
acint.net/match?dp=110&euid=63bb7f3a3f3c45d383ada451428af323
200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=63bb7f3a3f3c45d383ada451428af323
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=63bb7f3a3f3c45d383ada451428af323 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=4988fbbabddcce&transactionid=77b6fd20-9de3-4279-8cf3-bec8a035890d&auctionid=cd4ee6eb-ddef-45f3-b703-c27a9ca1b56b&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=4988fbbabddcce&transactionid=77b6fd20-9de3-4279-8cf3-bec8a035890d&auctionid=cd4ee6eb-ddef-45f3-b703-c27a9ca1b56b&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=4988fbbabddcce&transactionid=77b6fd20-9de3-4279-8cf3-bec8a035890d&auctionid=cd4ee6eb-ddef-45f3-b703-c27a9ca1b56b&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQxMTg0ZDM4Zg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash f19fc144e654e370fe4f5116889f6e50
29d736a59928b5022ff38658492b66934ca419de
468f63a07d61df0165902062c34756afed0ecdee92166c88a252083905a7706b
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:49:39 GMT
ETag: "29d736a59928b5022ff38658492b66934ca419de"
Last-Modified: Wed, 08 Feb 2023 19:49:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2967
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822c95f9ab511-OSL
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=2686090346b95198&transactionid=6b277881-1a58-48b2-add9-4f52a13f1ee0&auctionid=7678efd8-a81e-42a8-ae1e-841fa3d63806&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=2686090346b95198&transactionid=6b277881-1a58-48b2-add9-4f52a13f1ee0&auctionid=7678efd8-a81e-42a8-ae1e-841fa3d63806&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=2686090346b95198&transactionid=6b277881-1a58-48b2-add9-4f52a13f1ee0&auctionid=7678efd8-a81e-42a8-ae1e-841fa3d63806&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwNDg1NzQzYg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
pbs.alfasense.com/yandex/auction
200 OK 11 B URL HTTP/1.1 pbs.alfasense.com/yandex/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yandex/auction HTTP/1.1
Host: pbs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 267
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Expires: 0
X-Dsp-4__status: 204
Access-Control-Max-Age: 0
X-Geo-CityId: 4000000055
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
Accept-Ranges: bytes
const.uno/id.json?p=5
200 OK 13 B IP
ASN #12695 LLC Digital Network
File type JSON data\012- , ASCII text, with no line terminators
Hash f51f496a0658094e8eae3ee01c8c45ab
0f3ec02ab5185dfc13a4f1dc7ed01c6f400f39b6
d32acf592f7f63460ff06711e1a9d41fbf6327a03303ae840e83fa9ef278d8f1
GET /id.json?p=5 HTTP/1.1
Host: const.uno
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/json
Content-Length: 13
Connection: close
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://ritorika.com.ua
ocsp.sectigo.com/
200 OK 471 B IP
Hash a00d71c8c67f545524a5ed25652b1265
b8b9d056d128728710353e6a4beeb3098f9222ad
17ecb250ed20c5ea5f0f15e94cf89277d81c99235a28c3ad04f3f23f5212c08a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 02:03:28 GMT
Expires: Wed, 15 Feb 2023 02:03:27 GMT
Etag: "b8b9d056d128728710353e6a4beeb3098f9222ad"
Cache-Control: max-age=527161,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822c9587bb515-OSL
sync.programmatica.com/match/RTBSape?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1
200 OK 43 B URL HTTP/2 sync.programmatica.com/match/RTBSape?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/RTBSape?id=1303420ADC2FE463BC0A4B7F027C34DB&chk=1 HTTP/1.1
Host: sync.programmatica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
set-cookie: pid=MWRjOTNmNmNiNDZlOWRk; expires=Thu, 08 Aug 2024 23:27:25 GMT; domain=.programmatica.com; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=16&id=123876.702325.164153540.0.0.86&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=123876.702325.164153540.0.0.86&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=123876.702325.164153540.0.0.86&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29644&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29644&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29644&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
www.acint.net/pxl/1?dp=86&id=123876.702325.164153541.0.1.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=86&id=123876.702325.164153541.0.1.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=86&id=123876.702325.164153541.0.1.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=480c10993a542fe&transactionid=646057ae-2ff5-42f0-909f-437587d87cf9&auctionid=d83334cb-b29d-4e4f-9555-d7f305e74df8&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=480c10993a542fe&transactionid=646057ae-2ff5-42f0-909f-437587d87cf9&auctionid=d83334cb-b29d-4e4f-9555-d7f305e74df8&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=480c10993a542fe&transactionid=646057ae-2ff5-42f0-909f-437587d87cf9&auctionid=d83334cb-b29d-4e4f-9555-d7f305e74df8&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=29644&e=r&t=p
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29644&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29644&e=r&t=p HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.themoneytizer.com/moneybile.js
200 OK 16 kB URL HTTP/2 ads.themoneytizer.com/moneybile.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (33237)
Hash 1b62ea2c9df88b91aa57be715618c5b2
7aec62cdbf04a5a109ba60378cc98fd2a31b3401
de53227ae7bb0b60dfd484062ec53dc08d0332cbbd55d87f207377a7680becbd
GET /moneybile.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
last-modified: Fri, 12 Mar 2021 17:07:19 GMT
expires: Thu, 09 Feb 2023 16:04:31 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-accel-expires: @1675958671
server: CDN77-Turbo
x-77-nzt: AblMCRTrzZz/zWcAAA
x-77-nzt-ray: af585630a068ba6cdc2fe463ac3a011c
x-cache: HIT
x-age: 26573
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29868&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29868&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29868&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
v.alfasrv.com/stats/2x2.png?s=29863&e=r&t=p
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29863&e=r&t=p
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29863&e=r&t=p HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:25 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
www.acint.net/match?dp=98&euid=8a89514b-bfb6-45fc-848b-deda9fe99b0e
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=98&euid=8a89514b-bfb6-45fc-848b-deda9fe99b0e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=98&euid=8a89514b-bfb6-45fc-848b-deda9fe99b0e HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/oci/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=54773987&oid=39e8192718f4ed5a678fc273d654392b
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/oci/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=54773987&oid=39e8192718f4ed5a678fc273d654392b
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /oci/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=54773987&oid=39e8192718f4ed5a678fc273d654392b HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/oci/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=54773987&oid=39e8192718f4ed5a678fc273d654392b
px.adhigh.net/rtb/direct_banner?bid_id=404d867565b46558&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
302 Found 0 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=404d867565b46558&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/direct_banner?bid_id=404d867565b46558&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 0
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r6HQ;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:25 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/direct_banner?bid_id=404d867565b46558&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 682eeb7ec6e744c27ea32371ee1afa40
3bd66165b759bd7dac564e33b3c1d056309fd292
1d808028a59d797ea6a8f8625a2217a13114f056b936708f3966e52f6adb91e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D808028A59D797EA6A8F8625A2217A13114F056B936708F3966E52F6ADB91E4"
Last-Modified: Tue, 07 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10861
Expires: Thu, 09 Feb 2023 02:28:26 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
px.adhigh.net/rtb/direct_banner?bid_id=36e77a41f2fe5a18&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
302 Found 0 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=36e77a41f2fe5a18&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/direct_banner?bid_id=36e77a41f2fe5a18&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 0
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r6IA;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:25 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/direct_banner?bid_id=36e77a41f2fe5a18&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
X-Firefox-Spdy: h2
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 285
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: vid=8c6faae51552b0c58545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=206eccf1bb9380c&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
302 Found 0 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=206eccf1bb9380c&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/direct_banner?bid_id=206eccf1bb9380c&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 0
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r6IQ;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:25 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/direct_banner?bid_id=206eccf1bb9380c&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17771
Expires: Thu, 09 Feb 2023 04:23:36 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17771
Expires: Thu, 09 Feb 2023 04:23:36 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17771
Expires: Thu, 09 Feb 2023 04:23:36 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ce710ab5746832fe637fada3e6d63abf
d545c85d4a8cf92dc8b88db0a056623d1ef7a943
40bae4a2fb9dd60e9339d15ad0838f3ca83b5b6275c35cd22878b6783fcd6247
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7450
x-amzn-requestid: c3dabd4b-797b-4bbe-8824-5f502ff477b0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2aG-IoAMFfnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf5-68de905b2ed5bfe46a87e688;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CsMWJP4A64pbv9jhvJkyNF2SU7gQEIkQ5xWBlSVSlGjlfz9O0dkPGQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 03:38:47 GMT
age: 71318
etag: "d545c85d4a8cf92dc8b88db0a056623d1ef7a943"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/js/vast/player.min.js
200 OK 49 kB URL HTTP/2 cdn-rtb.sape.ru/js/vast/player.min.js
IP
Hash 0e20823f0a7746251dc2da117e54258d
b4d5b4f645be7355211e89cffa84950b349c6fe4
4317cc169d3f11d38942e4ed9fd0ba70172fa76948ee3c1f68297e871ec7fb82
GET /js/vast/player.min.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: text/javascript
content-security-policy: block-all-mixed-content
etag: W/"c6b01541f3febc658823ebcfe0841eb7"
last-modified: Thu, 13 Oct 2022 07:59:01 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 172BF475FBDC2637
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Thu, 09 Feb 2023 23:27:25 GMT
cache-control: max-age=86400
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
x-cache-status: HIT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17771
Expires: Thu, 09 Feb 2023 04:23:36 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95081172f8e19d19921acc802488e019
8531c150cb11de44361a95624b11cf46b9e0ba02
7a2d8f012c7d590f3f39ad834d4f3f9fb729143b7395bc588bd608b5bdee039b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15019
x-amzn-requestid: 574e3e2c-2fbe-4215-9500-021147338832
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f583LHiioAMFqkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a82d-4f12aac524c39f822ca4f422;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:11:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _3jIo3Giw3zmTmnSkJArAllT6uigN7EEzLPfkGpd6168_mSdqdk_Cg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 12:41:28 GMT
age: 38757
etag: "8531c150cb11de44361a95624b11cf46b9e0ba02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396748b7-25c0-4112-960c-9c86d5ad28f9.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396748b7-25c0-4112-960c-9c86d5ad28f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5fc553a8677d9c0bf4835a0c29a7345c
ec8541dd8ae32e1cf597d40cc1d9d04aefb46ba8
e821faf86e44f2b9c9d5bd8cd3575c0a99acfc58774077034c413e345a7c0c0c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396748b7-25c0-4112-960c-9c86d5ad28f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7451
x-amzn-requestid: a900a5b4-85cd-4817-8e70-2516eb33a0a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fox8IHMuIAMFdHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9c9e7-1122726b315a7c5623d1ff3f;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 02:09:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JFPF2xZJ9QIqJbOEjTi5gt2aflnM9HVaWp8FpRAIIeDf59cJzbp6kw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:46:36 GMT
age: 6049
etag: "ec8541dd8ae32e1cf597d40cc1d9d04aefb46ba8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17771
Expires: Thu, 09 Feb 2023 04:23:36 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
px.adhigh.net/rtb/direct_banner?bid_id=6a503a4754ec4a8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=6a503a4754ec4a8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=6a503a4754ec4a8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b42802dc628e38e9631a01b6320040a
c83355f0828815ecbff47d8195d2deed8077e368
d0f093b1769b568a5d68ada359eadfd1ab3360488a20e1deeb99b0a51b649441
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11256
x-amzn-requestid: fc079b98-a94a-4945-8e51-9b5941fda799
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8SEOMIAMFomA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb381-72b83330325d280821ecf4c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8BUL5SSz4_Jh8-i92w6IGXQEnW6RH2580LbDBIul4S45Mtji53ieTw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:06:10 GMT
age: 4875
etag: "c83355f0828815ecbff47d8195d2deed8077e368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0e9c6d739031209088f6dbbf08f19e59
649a29bfcc9fa92c656231bad3ce41e88c4037a6
520f00562077664a006b427c200a9f3c42dbeba3fed67bdc61537e71adcf6fc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9872
x-amzn-requestid: 62e9b3ff-7a27-4d74-90b0-ef7aeabaad39
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f53QlGE4oAMF53A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e09f36-79e1ef9f3c167abb05cfefd4;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 06:33:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cqUtGivplj5Ck5GLkAPyTpAZykoFGuukeBLQw2RJ6JPTgztGU7EV8A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 23:56:39 GMT
age: 84646
etag: "649a29bfcc9fa92c656231bad3ce41e88c4037a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea55fd1053c19123cb789a7d14479ccc
45fb06a6feeceff6a06c8c3f37e259ddf6e09820
393290f5ec8379a09da72b2554c30023b688489ffda79f5edfe6f114250ee4c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6061
x-amzn-requestid: cf552847-17d0-4820-9711-3fb129090686
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f8xbCG8jIAMF7Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1c913-0f2af41d6063340d483c3a55;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 03:44:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AhvgnN4mrezDRzaqcb-O0ZGyjW83OcyZd76sLZByQhZDzZgr8Mg-ZA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 05:14:12 GMT
age: 65593
etag: "45fb06a6feeceff6a06c8c3f37e259ddf6e09820"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=404d867565b46558&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=404d867565b46558&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=404d867565b46558&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=36e77a41f2fe5a18&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=36e77a41f2fe5a18&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=36e77a41f2fe5a18&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
www.acint.net/match?dp=129&euid=inu27j8m10
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=inu27j8m10
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=inu27j8m10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=206eccf1bb9380c&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=206eccf1bb9380c&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=206eccf1bb9380c&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420ADC2FE463BC0A4B7F027C34DB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=1303420ADC2FE463BC0A4B7F027C34DB&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=fc557315-890c-5228-8bdd-dcc0e839f31d; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QANMuimx7MwBBO5x-2CQQOOKVbVsCmaNg==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=155a53a5-0696-5228-b98e-6b72da6a44af; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QANPqD2D1SrOmHGIux1KogpO06PjpFsVw==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
pbs.alfasense.com/yandex/auction
200 OK 11 B URL HTTP/1.1 pbs.alfasense.com/yandex/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yandex/auction HTTP/1.1
Host: pbs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 268
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Expires: 0
X-Dsp-4__status: 204
Access-Control-Max-Age: 0
X-Geo-CityId: 4000000055
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b39e9b23d29a98eff34416a616ba37f5
bdc9129409a52c7da406b0a0bf6067b936a446dc
2329a603d135a67a020b3f1f94be7ffb9ad0b3afbd4a33a6e85d9ef1d053f4cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2329A603D135A67A020B3F1F94BE7FFB9AD0B3AFBD4A33A6E85D9EF1D053F4CD"
Last-Modified: Tue, 07 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5982
Expires: Thu, 09 Feb 2023 01:07:07 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash 0fc3e2be9a02b14fdb24e92d26da8838
d55b2ea7ea9d97de65bd0833926173f205591b6e
55958bd04c967f293dd41c5f4cd5fc52eaaad9738af71c0910fad08b11996c24
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3198
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:25 GMT
Last-Modified: Wed, 08 Feb 2023 22:34:07 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
px.adhigh.net/p/cm/sape?u=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 0
x-backend-id: f12-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r6vw;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:25 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=1303420ADC2FE463BC0A4B7F027C34DB&bounced=1
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420ADC2FE463BC0A4B7F027C34DB&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420ADC2FE463BC0A4B7F027C34DB&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=1303420ADC2FE463BC0A4B7F027C34DB&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=a04a7397-a65e-5228-b339-48f4d0dd6729; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QANzygyuRyIIm8fzK_gluFd8ynzE0XFcg==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=54fd414c-2063-5228-8fdf-9eeeec3bb133; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QAN1vjFz8LB9Ps0U7caHPs5Uo0j3oFN6Q==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash a08cdabad69fd36756ae2d16c64eedfd
506de6e85f7647ce27ba4d7d8bb87441881dad05
18f96a3b642d7d744280b51f60f32a376dcc53e2b9d3085f2df28eff417208ee
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 12 Feb 2023 21:26:39 GMT
ETag: "506de6e85f7647ce27ba4d7d8bb87441881dad05"
Last-Modified: Wed, 08 Feb 2023 21:26:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1226
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cb2b960b45-OSL
ocsp.globalsign.com/alphasslcasha256g4
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/alphasslcasha256g4
IP
Hash 4eba0f8ff3f181b6972170327185b4c1
1772e6b2b8ea7bca79026943ee643ed92c57ef07
951c0482899db344bfce1a7f792c898c3916d206741f5d752501f88b17ad0772
POST /alphasslcasha256g4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 1437
Connection: keep-alive
Expires: Sun, 12 Feb 2023 21:51:49 GMT
ETag: "1772e6b2b8ea7bca79026943ee643ed92c57ef07"
Last-Modified: Wed, 08 Feb 2023 21:51:50 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cb18ecb511-OSL
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:25 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=uXPY8l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czNsUWFGUDY1VFpEMHNpSW41bjRjJTJGUTI3JTJCRVhiZnpCS2J4bFB3N0V3dk15; expires=Mon, 04 Mar 2024 23:27:25 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: http://ritorika.com.ua
server-processing-duration-in-ticks: 127499
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3c3c87624881cd4ef20eaa10e1c12d3e
a16bbc0f11fc42b2ef24a9f2ce00870d0d508b85
07547dd051fd1fd27667fe89be38fc911fcb94cb94d3b43f8a12b094990141db
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: http://ritorika.com.ua
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Wed, 08 Feb 2023 23:27:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1303420ADC2FE463BC0A4B7F027C34DB
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1303420ADC2FE463BC0A4B7F027C34DB
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-6262920301; expires=Fri, 07 Feb 2025 23:27:25 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6262920301
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7011d43f0019eb7900daf74935a2c0a9
294bbf6d97366cacf46231354d1b62a417a3f89e
73b5c4bc2890d97964453c97ae3e7e9aa5cb4efd7d5041a2ba46f3372d9e7294
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73B5C4BC2890D97964453C97AE3E7E9AA5CB4EFD7D5041A2BA46F3372D9E7294"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4140
Expires: Thu, 09 Feb 2023 00:36:25 GMT
Date: Wed, 08 Feb 2023 23:27:25 GMT
Connection: keep-alive
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fritorika.com.ua%2F&domain=ritorika.com.ua&cw=1&lsw=1
200 OK 412 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fritorika.com.ua%2F&domain=ritorika.com.ua&cw=1&lsw=1
IP
Hash 6e8e672ebd4070d0a276eb6d0a9993ba
f6f65aa8743c47dfbbe6ae3e2d3cb707dfc2772b
64f010f0ebf203a1cabbb2b93c79d3a0adde6cd9c27867322b0c28494ecfc04d
GET /sid/json?origin=prebid&topUrl=http%3A%2F%2Fritorika.com.ua%2F&domain=ritorika.com.ua&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: http://ritorika.com.ua
server-processing-duration-in-ticks: 969642
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898902440
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898902440
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898902440 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=89eddc1500ca48debc2f490fc9c7ed13; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 2
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A123876%2C%22sc%22%3A0%2C%22pl%22%3A702325%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898902 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash d5dfe7a9b50e9aca3c95f2fbe89f8b1d
1a443dfe53fae80736043a72d7bd2b8d359439dc
f0b950fb23defbe9902b76f5074ece28cc622991a244f30a72bf8db71f5502b4
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 06 Feb 2023 04:18:21 GMT
Expires: Mon, 13 Feb 2023 04:18:20 GMT
Etag: "1a443dfe53fae80736043a72d7bd2b8d359439dc"
Cache-Control: max-age=604155,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 995
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cb6fcab51d-OSL
pbs.alfasense.com/yandex/auction
200 OK 11 B URL HTTP/1.1 pbs.alfasense.com/yandex/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yandex/auction HTTP/1.1
Host: pbs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 267
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Expires: 0
Access-Control-Max-Age: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
Accept-Ranges: bytes
ocsp.sectigo.com/
200 OK 471 B IP
Hash ad0b10ccd14c3287cc65cb31e88a5ba0
8a198f269b9169fc82be56964dd9bcf8c7ba03f8
2081cc78ee229c88e6768cb3aa4beb9507c3ff867685f6113d5b69e288fff6c9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 14:18:47 GMT
Expires: Tue, 14 Feb 2023 14:18:46 GMT
Etag: "8a198f269b9169fc82be56964dd9bcf8c7ba03f8"
Cache-Control: max-age=484880,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796822cb39fcb515-OSL
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
400 Bad Request 22 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP
ASN #36057 WEBAIR-INTERNET-MTL
File type ASCII text, with no line terminators
Hash b0b11e1c78b526b61477f8e9ee540be0
d5e73002987ff54626542b116d98a8f4aa9ee2eb
4ca18c247df52dd22650bd7f72f71d7c98102243b0ec474f683c6a279ad3a668
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 08 Feb 2023 23:27:25 GMT
Content-Length: 22
Connection: close
Cache-Control: no-store
Age: 0
Pragma: no-cache
px.adhigh.net/p/cm/sape?u=1303420ADC2FE463BC0A4B7F027C34DB&bounced=1
200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1303420ADC2FE463BC0A4B7F027C34DB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=1303420ADC2FE463BC0A4B7F027C34DB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: image/gif
content-length: 49
x-backend-id: f12-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
ads.betweendigital.com/adjson?t=prebid
200 OK 68 B URL HTTP/2 ads.betweendigital.com/adjson?t=prebid
IP
Hash 09fff9cbfb343570dfe91a24df02a5f8
c3ed382e423e938a8dd8ab2c313d8685231c8ff8
7c01239ed63cfe3590205b6e716f9ba0be1e81f917ac0a71c6c007c943fc1637
POST /adjson?t=prebid HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 461
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=096e0afa-8170-5228-a62a-cac7c5cee51a; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QAK9LC8Vkn_4ukQhK4nQfbhEZLVG7fAZQ==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 344a2d9a54a98bf88132f8b2891ea4bc
aa1655bdbdc1b3a68dd0f964ffa4b02a01ce968b
489bacab3dca094574f3751e31281f22f5a1e56fe400039c02ffcd2ad45e98d8
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 12 Feb 2023 20:19:16 GMT
ETag: "aa1655bdbdc1b3a68dd0f964ffa4b02a01ce968b"
Last-Modified: Wed, 08 Feb 2023 20:19:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3496
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cb9949b511-OSL
tag.digitaltarget.ru/adcm.js
200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Wed, 08 Feb 2023 23:04:10 GMT
Connection: keep-alive
ETag: "63e42a6a-beb"
Accept-Ranges: bytes
ritorika.com.ua/wp-content/uploads/2021/06/cropped-text-192x192.jpg
200 OK 5.3 kB URL HTTP/2 ritorika.com.ua/wp-content/uploads/2021/06/cropped-text-192x192.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 8cc28fef6fc3bfcec9e35228edd673ba
a9a39420e191097ed8beb4b11d505d5334f00cc4
3135ee976640196d2e5b2c0ff2a3eb231275faf02c48ca5b9634516200072e47
GET /wp-content/uploads/2021/06/cropped-text-192x192.jpg HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: image/jpeg
content-length: 5307
last-modified: Mon, 21 Jun 2021 04:39:34 GMT
etag: "60d01806-14bb"
expires: Fri, 10 Mar 2023 23:27:26 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash a67ce41f6b6e33b145dcc265b0cf4024
2df9426f06b61c3aaf1f8ebd80dad860be47efbc
ed692c7ab635f3bf8dbc6d47c71a9eaf47c2df9eafd76cfab88fcb03305af0b4
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 12 Feb 2023 19:30:31 GMT
ETag: "2df9426f06b61c3aaf1f8ebd80dad860be47efbc"
Last-Modified: Wed, 08 Feb 2023 19:30:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3072
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cbc95ab511-OSL
ritorika.com.ua/wp-content/uploads/2021/06/cropped-text-32x32.jpg
200 OK 776 B URL HTTP/2 ritorika.com.ua/wp-content/uploads/2021/06/cropped-text-32x32.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 32x32, components 3\012- data
Hash cf57b6a348d56bad4eae1fc4448c2242
d50d2972db260cbe28331d2569309e82120337a6
848fae9153a9ec58ba03bffce23987097a4453df6f9e69ba298e4041382b948c
GET /wp-content/uploads/2021/06/cropped-text-32x32.jpg HTTP/1.1
Host: ritorika.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: image/jpeg
content-length: 776
last-modified: Mon, 21 Jun 2021 04:39:34 GMT
etag: "60d01806-308"
expires: Fri, 10 Mar 2023 23:27:26 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
sape-sync.rutarget.ru/sync
302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=JtME2BrgNBhR
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=JtME2BrgNBhR; Path=/; Domain=.rutarget.ru; Expires=Mon, 07 Aug 2023 23:27:26 GMT; SameSite=None; Secure
d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js
200 OK 26 kB URL HTTP/1.1 d2zur9cc2gf1tx.cloudfront.net/a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js
IP
File type ASCII text, with very long lines (16085)
Hash 8703fc9eead243fe2f47380e962d7fa2
3d9f707259112fa9ccdd1e676f00eadcff71906c
b47b4ca26c57e3dceebd7abd067df9622599bed6bfb11b480f92d09a945cd213
GET /a96081b6-db78-48c4-9f82-b93e316fb1f7/notifyme.js HTTP/1.1
Host: d2zur9cc2gf1tx.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 25704
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Mon, 18 Feb 2019 16:54:28 GMT
Server: Apache
Date: Wed, 08 Feb 2023 07:43:40 GMT
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F4rnMGuVRXNGPpkKy78_s1rkCcwno2DMilOuO_688SEV2TUN8VTRnw==
Age: 56627
ced.sascdn.com/tag/1097/smart.js
200 OK 33 kB URL HTTP/1.1 ced.sascdn.com/tag/1097/smart.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash a97933c723f113f0dd3d2002e84d93a2
094b9f92278e5666edf0188782d3ac6c6ac6166e
bbf457cf59f2a71418ba0c89105917395c3d627dd6087db9dd5202f3969035b7
GET /tag/1097/smart.js HTTP/1.1
Host: ced.sascdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 33218
Cache-Control: public, max-age=7200
Expires: Thu, 09 Feb 2023 01:27:26 GMT
Date: Wed, 08 Feb 2023 23:27:26 GMT
Connection: keep-alive
x01.aidata.io/0.gif?pid=9401454&id=1303420ADC2FE463BC0A4B7F027C34DB
302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1303420ADC2FE463BC0A4B7F027C34DB
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=1303420ADC2FE463BC0A4B7F027C34DB&bounce=1
expires: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Wed, 08 Feb 2023 23:27:25 GMT
set-cookie: __upin=tGe4NGhGmeSZP9qHnxYOvw;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1675898846;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
ads.betweendigital.com/sspmatch-js?p=42565&randsalt=8417562046
302 Found 0 B URL HTTP/1.1 ads.betweendigital.com/sspmatch-js?p=42565&randsalt=8417562046
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch-js?p=42565&randsalt=8417562046 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 302 Found
location: https://ads.betweendigital.com/sspmatch-js?p=42565&randsalt=8417562046&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
tuuid=cf105361-cf03-5228-9b43-6d6cf8a742b2; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3gAA_eibeU_WhlmedNC6yAVzmZ2UrfdYAg==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
ocsp.digicert.com/
200 OK 471 B IP
Hash 67226199464b18c839cd5cfa96cae88b
fb6a62c5e2ede15470740e30ee9df37fd1d774b2
7a24ad381f2b14f7285d5bc2074b79fd97fba5c564629e928f3fc8467aafefa3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5701
Cache-Control: max-age=159276
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:26 GMT
Etag: "63e3e4c5-1d7"
Expires: Fri, 10 Feb 2023 19:42:02 GMT
Last-Modified: Wed, 08 Feb 2023 18:07:01 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 47e4d68aead40dddb605413b5a61da93
3647c183428a10ec09290bbcf07225802efd9987
74d2676bc9b1ab6d71d9a6d9628d3af8ea7d4be6cb50b603451648b3f5d56bd6
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 12 Feb 2023 23:03:12 GMT
ETag: "3647c183428a10ec09290bbcf07225802efd9987"
Last-Modified: Wed, 08 Feb 2023 23:03:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 459
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cc39aeb511-OSL
cmp.quantcast.com/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
200 OK 2.1 kB URL HTTP/2 cmp.quantcast.com/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
IP
File type ASCII text, with very long lines (1834)
Hash cc3f520c114b97ce0826b7c77a8d35a8
872010df489f96a7a94f021cf370e0d249bcebb4
baae1ec83d273d3a4bbea495edd0a6d00cdc3d84822357b756930b39fc8042fe
GET /choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:53:56 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Wed, 08 Feb 2023 23:26:57 GMT
cache-control: max-age=3600
etag: W/"c53bd785b1ee57b613221019d7d72626"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -6mPPyJxD2oKnrSST2GsJeJmXS9ZTqvBxGMy_dvaqjChVMm4nZVjfA==
age: 30
X-Firefox-Spdy: h2
yandex.ru/ads/system/context.js
200 OK 84 kB URL HTTP/2 yandex.ru/ads/system/context.js
IP
File type ASCII text, with very long lines (65492)
Hash ac4f4e569808eeba567cf1d25084f5ce
587135071bab83929da480005ea15b468c426cbb
485205048c0f31daf5757a2bee6480b35abad2b02d3f78c59832e9ed34a6f493
GET /ads/system/context.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=DZeGJw3BdqVqL+id0tjzpDjjLbxinCg8S3tWuA3ZA5TsWsaTa/fqOApZBZAwpkVShnF9XdHLMn7kj1aFfC+UXwYhDFQ=; Expires=Fri, 07-Feb-2025 23:27:26 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=8093502801675898846; Path=/; Domain=.yandex.ru; Expires=Thu, 08 Feb 2024 23:27:26 GMT; SameSite=None; Secure; HttpOnly
expires: Thu, 09 Feb 2023 00:27:26 GMT
x-yandex-req-id: 1675898846018597-6443037047812739429-vla1-5334-vla-l7-balancer-8080-BAL-8584
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
ad.mail.ru/cm.gif?p=48&id=1303420ADC2FE463BC0A4B7F027C34DB
200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=1303420ADC2FE463BC0A4B7F027C34DB
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=0h5I0g1MNc2F0029c30EaLYF:::0-0-0-8fe889e:CAASEEubwOT_oQ1TpV3nVaHFjQ0aYB_GB7Eevomp6Us0_J20Ft0Wm8PRydL0yRtPRnqaIklH8OBN800fi6TywM6k3bzMddyDUd82GGWfYemvsz9mIPVGyps7JPM3UDua4k8T1bdGMsch8j1CIfoh3lDaPqUaCw; path=/; expires=Fri, 09-Feb-24 23:27:26 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Thu, 09 Feb 2023 05:27:26 GMT
cache-control: max-age=21600
last-modified: Wed, 08 Feb 2023 23:27:26 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
200 OK 44 kB URL HTTP/2 cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 18054ed30b540211ea1dcf471b99dcd4
88a9f557bdf5d10fcabb81f0ed09b8660495ae01
eca3c60a5bb2d12b77924975d98557385d945afd54056d26871091c568552493
GET /tcfv2/42/cmp2.js?referer=www.themoneytizer.com HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
cache-control: max-age=172800
date: Wed, 08 Feb 2023 17:34:08 GMT
last-modified: Tue, 05 Jul 2022 18:40:23 GMT
etag: W/"9494b70738cd74c9137e65c29c0b1f3e"
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JIOzjRVIR4KkxZtDoS9iggVRfe8JC_u6GlMNWVMoXGW21a0Vq4O00w==
age: 21199
X-Firefox-Spdy: h2
sm.rtb.mts.ru/p?ssp=sape&id=1303420ADC2FE463BC0A4B7F027C34DB
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=1303420ADC2FE463BC0A4B7F027C34DB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=1303420ADC2FE463BC0A4B7F027C34DB
Set-Cookie: dspid=3ffa7188-b37c-4070-9cec-e485e92e1be3; expires=Tue, 30 Jan 2024 23:27:26 GMT; domain=.mts.ru; path=/; secure; SameSite=None
matchid.adfox.yandex.ru/getcookie
200 OK 88 B URL HTTP/2 matchid.adfox.yandex.ru/getcookie
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 120ab2d76e8018294802093c690d33e6
ca3e4ef6f35af21557a97e364c62c7b6ca8dc891
48c606538182ba90423c232efab1e76fe39d7b842b4ecede1b181b78545fffbe
GET /getcookie HTTP/1.1
Host: matchid.adfox.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 88
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/json
timing-allow-origin: *
access-control-allow-origin: http://ritorika.com.ua
x-content-type-options: nosniff
X-Firefox-Spdy: h2
id5-sync.com/i/12/9.gif?gdpr=&gdpr_consent=
200 43 B URL HTTP/1.1 id5-sync.com/i/12/9.gif?gdpr=&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /i/12/9.gif?gdpr=&gdpr_consent= HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Wed, 08-Feb-2023 23:32:26 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cip=; Max-Age=300; Expires=Wed, 08-Feb-2023 23:32:26 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cnac=; Max-Age=300; Expires=Wed, 08-Feb-2023 23:32:26 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
car=; Max-Age=300; Expires=Wed, 08-Feb-2023 23:32:26 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
gdpr=; Max-Age=300; Expires=Wed, 08-Feb-2023 23:32:26 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
callback=; Max-Age=300; Expires=Wed, 08-Feb-2023 23:32:26 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Wed, 08 Feb 2023 23:27:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (554)
Hash 315a601116a9b3b0fbc85feb58375ba4
5d283ed923d0b3beb8a2ec4e80c2958d1d132fbf
251ba0fc04953e3615e7c19a9a10c5d6a4f25cc03bef190f8a5e7c6cd72a991a
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58140
date: Wed, 08 Feb 2023 23:27:26 GMT
access-control-allow-origin: *
etag: "63e36f34-e31c"
expires: Thu, 09 Feb 2023 00:27:26 GMT
last-modified: Wed, 08 Feb 2023 12:45:24 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=147&r=2&j=criteoCallback
200 OK 12 kB URL HTTP/2 gum.criteo.com/sync?c=147&r=2&j=criteoCallback
IP
Hash 972e7accbd568c92888a512f250226ca
239c3ab9c8f8d8a5fcb14d39a67e34f86a22a6f8
f62b2300b9c4296927d97d3f05d0666d7e9d1680963afc5b6e443beeaacb51b9
GET /sync?c=147&r=2&j=criteoCallback HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 513799
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f4a0fb534cc324369a3ace4eea6cc1fa
108b5616643702d9c76bf4b82593895b743195e8
a3fafdc51ceb190bb96497e324e7f5f335b2425873f167aee22de8078ef58a5c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 12 Feb 2023 20:00:06 GMT
ETag: "108b5616643702d9c76bf4b82593895b743195e8"
Last-Modified: Wed, 08 Feb 2023 20:00:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3185
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cd29acb50c-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f4a0fb534cc324369a3ace4eea6cc1fa
108b5616643702d9c76bf4b82593895b743195e8
a3fafdc51ceb190bb96497e324e7f5f335b2425873f167aee22de8078ef58a5c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 12 Feb 2023 20:00:06 GMT
ETag: "108b5616643702d9c76bf4b82593895b743195e8"
Last-Modified: Wed, 08 Feb 2023 20:00:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3185
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cd2a4eb511-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f4a0fb534cc324369a3ace4eea6cc1fa
108b5616643702d9c76bf4b82593895b743195e8
a3fafdc51ceb190bb96497e324e7f5f335b2425873f167aee22de8078ef58a5c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 12 Feb 2023 20:00:06 GMT
ETag: "108b5616643702d9c76bf4b82593895b743195e8"
Last-Modified: Wed, 08 Feb 2023 20:00:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3185
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822cd2cda0b45-OSL
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Wed, 08 Feb 2023 23:27:26 GMT
access-control-allow-origin: *
etag: "63e36f34-12029"
expires: Thu, 09 Feb 2023 00:27:26 GMT
last-modified: Wed, 08 Feb 2023 12:45:24 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/718954/36caea299034b123bba5.js
200 OK 24 kB URL HTTP/2 yastatic.net/partner-code-bundles/718954/36caea299034b123bba5.js
IP
File type ASCII text, with very long lines (65494)
Hash 733dd172cf86f7c3cbe7087116475df2
574f65181b1e9382e387c57c474bd1279255ff54
cc67e4d3b7dafaac708060da2c158838dd4722970679c4770cb9a20d10073b6c
GET /partner-code-bundles/718954/36caea299034b123bba5.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 23534
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "733dd172cf86f7c3cbe7087116475df2"
expires: Sat, 08 Feb 2053 06:03:21 GMT
last-modified: Tue, 07 Feb 2023 15:31:43 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/718954/1c0942547d39e10f5f56.js
200 OK 4.8 kB URL HTTP/2 yastatic.net/partner-code-bundles/718954/1c0942547d39e10f5f56.js
IP
File type ASCII text, with very long lines (14344)
Hash 19cece338cdd217d0771d4f8522ea336
b6540ab8ec95a3181cad73f4aad3d48af074eb68
a54e83fc3d78da047dd468556deffda639c6866c7b8ceee78eabe830f5e6e746
GET /partner-code-bundles/718954/1c0942547d39e10f5f56.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 4801
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "19cece338cdd217d0771d4f8522ea336"
expires: Sat, 08 Feb 2053 06:03:21 GMT
last-modified: Tue, 07 Feb 2023 15:31:43 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/host.js
200 OK 8.9 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js
IP
File type ASCII text, with very long lines (33703), with no line terminators
Hash f80882bf67cf261aa08d636da095149a
3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
GET /safeframe-bundles/0.83/host.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Sat, 08 Feb 2053 06:02:03 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/718954/07cea2bf8567304efc16.js
200 OK 7.9 kB URL HTTP/2 yastatic.net/partner-code-bundles/718954/07cea2bf8567304efc16.js
IP
File type ASCII text, with very long lines (23593)
Hash 7f2cadff7389788cd781bce9174300ce
8d1d1e6918fc049d1093b9687fa210121ea7e5fb
8d9790f9dd8a6386b005c8952783aff9b9e60a32548fcef91e98526a70c39922
GET /partner-code-bundles/718954/07cea2bf8567304efc16.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 7925
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "7f2cadff7389788cd781bce9174300ce"
expires: Sat, 08 Feb 2053 06:03:21 GMT
last-modified: Tue, 07 Feb 2023 15:31:43 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
yastatic.net/partner-code-bundles/718954/2e96844bde3642fb4544.js
200 OK 109 kB URL HTTP/2 yastatic.net/partner-code-bundles/718954/2e96844bde3642fb4544.js
IP
File type ASCII text, with very long lines (65497)
Size 109 kB (109240 bytes)
Hash 9f61d56ce794dd529daef5e3fdb52e38
123d298913296cae2dce053f6817a907074b0fb2
ee210f7e421a357a4073f06a8a0a68398e05b38ac6c1f3785e450d919c33dd8b
GET /partner-code-bundles/718954/2e96844bde3642fb4544.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 109240
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "9f61d56ce794dd529daef5e3fdb52e38"
expires: Sat, 08 Feb 2053 06:03:21 GMT
last-modified: Tue, 07 Feb 2023 15:31:43 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=1303420ADC2FE463BC0A4B7F027C34DB&bounce=1
204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1303420ADC2FE463BC0A4B7F027C34DB&bounce=1
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1303420ADC2FE463BC0A4B7F027C34DB&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
expires: Wed, 08 Feb 2023 23:27:25 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Wed, 08 Feb 2023 23:27:25 GMT
set-cookie: __upin=KVbfcRlOZkIRpC2YR9Z6fQ;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1675898846;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=5416a4e5fdf1081&transactionid=cb0fdb3a-c266-4665-8970-34ffaa3ee438&auctionid=757bcb26-995e-4449-8bae-fe4b87aafc70&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=5416a4e5fdf1081&transactionid=cb0fdb3a-c266-4665-8970-34ffaa3ee438&auctionid=757bcb26-995e-4449-8bae-fe4b87aafc70&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=5416a4e5fdf1081&transactionid=cb0fdb3a-c266-4665-8970-34ffaa3ee438&auctionid=757bcb26-995e-4449-8bae-fe4b87aafc70&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1032
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: sspuid=CkIDIWPkL92gvgAbPkW3AsoYPF35Xz76RhimDH5g9XgskayE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
s.alfasrv.com/events/1x1.png?s=29644&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29644&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29644&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29644&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29644&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29644&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:26 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420ADC2FE463BC0A4B7F027C34DB
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420ADC2FE463BC0A4B7F027C34DB
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
200 OK 0 B URL HTTP/2 yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: font/woff2
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Fri, 09 Feb 2024 05:15:07 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: 8048a47e7738bf93
accept-ranges: bytes
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=5267f748f1b9a338&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
302 Found 0 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=5267f748f1b9a338&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/direct_banner?bid_id=5267f748f1b9a338&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 0
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r81g;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:26 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/direct_banner?bid_id=5267f748f1b9a338&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/1303420ADC2FE463BC0A4B7F027C34DB?redir-setuniq=1
200 OK 78 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/1303420ADC2FE463BC0A4B7F027C34DB?redir-setuniq=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d8a56f37926e74d5ce54996aded84edb
5da503e6f191a189d344828f74df648b0bf55789
4497e424faa008199d65bdf6b7165345c7a7a75c4fdc8fc844d6255bc960b17a
GET /mapuid/sapeis/1303420ADC2FE463BC0A4B7F027C34DB?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Wed, 08 Feb 2023 23:27:26 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08 Feb 2023 23:27:26 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Wed, 08 Feb 2023 23:27:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=645d2b62b7d6c9f8&transactionid=3a1e2ec3-8ed0-4730-88d9-b46b52ef0290&auctionid=e7cde8a5-cb4c-4400-b29c-52977361946f&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=645d2b62b7d6c9f8&transactionid=3a1e2ec3-8ed0-4730-88d9-b46b52ef0290&auctionid=e7cde8a5-cb4c-4400-b29c-52977361946f&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=645d2b62b7d6c9f8&transactionid=3a1e2ec3-8ed0-4730-88d9-b46b52ef0290&auctionid=e7cde8a5-cb4c-4400-b29c-52977361946f&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29863&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29863&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29863&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:26 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
s.alfasrv.com/events/1x1.png?s=29863&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29863&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29863&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.alfasense.net/adserver/www/delivery/asyncjs.php
200 OK 4.5 kB URL HTTP/1.1 ads.alfasense.net/adserver/www/delivery/asyncjs.php
IP
ASN #52000 Innovation IT Solutions LTD
File type HTML document text\012- C source text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4451), with no line terminators
Hash 6a351e7a844e42f2970773e705eddf36
66cc3e2474cf7085d0bfd5112003b0b9f0f87dbf
d3d5d8e3aaeec086ae00ad814b3adae7e41462e42a308a09dbce39aaa11572e3
GET /adserver/www/delivery/asyncjs.php HTTP/1.1
Host: ads.alfasense.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
ETag: 1079f85a6f7f7d83640b17a26d3394d5
Expire: Thu, 09 Feb 2023 00:27:27 GMT
Cache-Control: private, max-age=3600
P3P: CP="CUR ADM OUR NOR STA NID"
Content-Security-Policy: frame-ancestors 'self';frame-src 'self';
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Permissions-Policy: geolocation=(self), payment=(self)
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block;
Set-Cookie: SRVGROUP=common; path=/; HttpOnly
px.adhigh.net/rtb/direct_banner?bid_id=7221c8339da6abc8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
302 Found 0 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=7221c8339da6abc8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/direct_banner?bid_id=7221c8339da6abc8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 0
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r9FA;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:26 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/direct_banner?bid_id=7221c8339da6abc8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=29864&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29864&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29864&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ssp.otm-r.com/adjson?tz=0&w=970&h=90&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=84d0fe5e41c114b8&transactionid=e883ed34-9d28-49f7-a817-1df2002fc132&auctionid=6ee6f683-f380-4c82-bac6-d77bb44178b0&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=970&h=90&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=84d0fe5e41c114b8&transactionid=e883ed34-9d28-49f7-a817-1df2002fc132&auctionid=6ee6f683-f380-4c82-bac6-d77bb44178b0&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=970&h=90&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=84d0fe5e41c114b8&transactionid=e883ed34-9d28-49f7-a817-1df2002fc132&auctionid=6ee6f683-f380-4c82-bac6-d77bb44178b0&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 283
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: vid=8c6faae51552b0c58545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:26 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fritorika.com.ua%2F&domain=ritorika.com.ua&cw=1&lsw=1
200 OK 117 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fritorika.com.ua%2F&domain=ritorika.com.ua&cw=1&lsw=1
IP
Hash 9e3c67632a4d85f1adc4573c4bd4dc2d
a30ea4c656c1fb43b4071cf605f6ce345d59506a
506b1af10328e3b18d3f07f61984404583147855c29ae9ea66a0827674c53c54
OPTIONS /sid/json?origin=prebid&topUrl=http%3A%2F%2Fritorika.com.ua%2F&domain=ritorika.com.ua&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: http://ritorika.com.ua
server-processing-duration-in-ticks: 428528
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1032
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: sspuid=CkIDIWPkL92gvgAbPkW3AsoYPF35Xz76RhimDH5g9XgskayE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
ssp.otm-r.com/adjson?tz=0&w=970&h=90&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=863233e112ba294&transactionid=c198b31c-6348-4d95-8350-1d93f79bb6e9&auctionid=e7bc9491-8096-4b8d-affa-c81373601a0b&bidfloor=0
200 OK 30 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=970&h=90&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=863233e112ba294&transactionid=c198b31c-6348-4d95-8350-1d93f79bb6e9&auctionid=e7bc9491-8096-4b8d-affa-c81373601a0b&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type gzip compressed data, max speed, from Unix\012- data
Hash 0d4b25f302ee29595eca8ecdb78b4b7e
e31a6e78fa3b8ad2c38a789fc79325ec04bfed58
9ac4a29adfe34880ba5e86d0a4fa741e159613ed87d72585199cf0b21cde4e5e
GET /adjson?tz=0&w=970&h=90&domain=&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=38014&cur=RUB&bidid=863233e112ba294&transactionid=c198b31c-6348-4d95-8350-1d93f79bb6e9&auctionid=e7bc9491-8096-4b8d-affa-c81373601a0b&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=29865&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29865&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29865&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=760d6e87d33d15&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB
302 Found 0 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=760d6e87d33d15&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/direct_banner?bid_id=760d6e87d33d15&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 0
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r9OQ;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:26 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/direct_banner?bid_id=760d6e87d33d15&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29865&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29865&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29865&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:26 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
ssp.hybrid.ai/auction/prebid
204 No Content 0 B URL HTTP/2 ssp.hybrid.ai/auction/prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /auction/prebid HTTP/1.1
Host: ssp.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 284
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: vid=8c6faae51552b0c58545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:26 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
server: Hybrid Web Server
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=88995401549aed5&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB
302 Found 0 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=88995401549aed5&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/direct_banner?bid_id=88995401549aed5&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 0
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
set-cookie: gi_u=LmG1eWM8EMN.AikABlGGM1r9Sw;Path=/;Domain=.adhigh.net;Expires=Thu, 08-Feb-2024 23:27:26 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/rtb/direct_banner?bid_id=88995401549aed5&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1032
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: sspuid=CkIDIWPkL92gvgAbPkW3AsoYPF35Xz76RhimDH5g9XgskayE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: openresty
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
pbs.alfasense.com/yandex/auction
200 OK 11 B URL HTTP/1.1 pbs.alfasense.com/yandex/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yandex/auction HTTP/1.1
Host: pbs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 267
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Expires: 0
X-Dsp-4__status: 204
Access-Control-Max-Age: 0
X-Geo-CityId: 4000000055
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
Accept-Ranges: bytes
sm.rtb.mts.ru/match/second?ssp=30&exu=1303420ADC2FE463BC0A4B7F027C34DB
200 OK 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=1303420ADC2FE463BC0A4B7F027C34DB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=1303420ADC2FE463BC0A4B7F027C34DB HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
pbs.alfasense.com/yandex/auction
200 OK 11 B URL HTTP/1.1 pbs.alfasense.com/yandex/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yandex/auction HTTP/1.1
Host: pbs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 267
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Expires: 0
X-Dsp-4__status: 204
Access-Control-Max-Age: 0
X-Geo-CityId: 4000000055
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
Accept-Ranges: bytes
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903234
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903234
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903234 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=1682dca349784701889e10ab148bbcfb; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:25 GMT
content-length: 2
X-Firefox-Spdy: h2
pbs.alfasense.com/yandex/auction
200 OK 11 B URL HTTP/1.1 pbs.alfasense.com/yandex/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yandex/auction HTTP/1.1
Host: pbs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 267
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Expires: 0
X-Dsp-4__status: 204
Access-Control-Max-Age: 0
X-Geo-CityId: 4000000055
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
Accept-Ranges: bytes
ads.betweendigital.com/adjson?t=prebid
200 OK 69 B URL HTTP/2 ads.betweendigital.com/adjson?t=prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 32ca331360c4e3797dbc4ba3bd5ff2bf
92045dbe0ba7d8a854024ed30fb71935c515a501
e4de44350fb87c0ae8c17e5a21f96e66631eb384d8d4f58a90603f442339a707
POST /adjson?t=prebid HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 457
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
tuuid=461a12f9-58b1-5228-8e57-4125edb36efb; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3gAHqPBZR9OktH1RSgU7xO45foo_fN2QMA==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=5267f748f1b9a338&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=5267f748f1b9a338&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=5267f748f1b9a338&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=7221c8339da6abc8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=7221c8339da6abc8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=7221c8339da6abc8&pid=66&tid=300x250_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=300x250&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=760d6e87d33d15&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=760d6e87d33d15&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=760d6e87d33d15&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
px.adhigh.net/rtb/direct_banner?bid_id=88995401549aed5&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1
200 OK 12 B URL HTTP/2 px.adhigh.net/rtb/direct_banner?bid_id=88995401549aed5&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type JSON data\012- , ASCII text, with no line terminators
Hash 71d0daa4366fbebc75f9201e31040b5b
2229c1ab1493aff0eb7bac2d99ac166527c82a9d
cac9fb81a29c07978b6ff53ec2a73344f4756aba46e066610c17d9dd06fa96ae
GET /rtb/direct_banner?bid_id=88995401549aed5&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Content-Type: text/plain
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
x-backend-id: f12-ru
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
tag.digitaltarget.ru/processor.js?i=967783503248794
200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=967783503248794
IP
File type ASCII text, with very long lines (15892), with no line terminators
Hash 736e2fb1da94f3277e3f931048c1b9f3
196387db95a17da825b629de3542eff901b09905
4569d4e1b0e52b6316681f7312674f43ecb2b72ea8ab4adb2375e3686862c7dc
GET /processor.js?i=967783503248794 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/javascript
Content-Length: 15892
Last-Modified: Wed, 08 Feb 2023 23:04:11 GMT
Connection: keep-alive
ETag: "63e42a6b-3e14"
Accept-Ranges: bytes
ads.themoneytizer.com/bidder1/moneybid.js?siteid=88050&adid=3&formatid=26323&size=desktop
200 OK 254 B URL HTTP/2 ads.themoneytizer.com/bidder1/moneybid.js?siteid=88050&adid=3&formatid=26323&size=desktop
IP
ASN #60068 Datacamp Limited
Hash 54191f53f8b7e990b737aa6ab6aa89b3
db59de6b6efa6648df41b1f75026e2368d39fd73
5c74676b070f4bc80e4e3449e23d1f743d9a215ca3c5dc3e187adc28869ae303
GET /bidder1/moneybid.js?siteid=88050&adid=3&formatid=26323&size=desktop HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: http://ritorika.com.ua
cache-control: max-age=604800
x-accel-expires: @1676477173
server: CDN77-Turbo
vary: Origin
x-77-nzt: AblMCRTs7nL/aWcAAA
x-77-nzt-ray: af585630a068ba6cde2fe4630fc3142f
x-cache: HIT
x-age: 26473
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 5aebea131b9dbe928fa89c601d1d5fa5
b9a4bff3229f2a22f136b96a818b7943ec957afe
ca5882cca39299cb23fe334f0f90b538db28f6e61dcb0bfef027f1475a65e564
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4696
Cache-Control: max-age=168683
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:26 GMT
Etag: "63e40d71-116"
Expires: Fri, 10 Feb 2023 22:18:49 GMT
Last-Modified: Wed, 08 Feb 2023 21:00:33 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36509&cur=RUB&bidid=21b06d1f083ed4e8&transactionid=872a7cb9-9276-4ce2-b308-9304a92788dd&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36509&cur=RUB&bidid=21b06d1f083ed4e8&transactionid=872a7cb9-9276-4ce2-b308-9304a92788dd&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36509&cur=RUB&bidid=21b06d1f083ed4e8&transactionid=872a7cb9-9276-4ce2-b308-9304a92788dd&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ssp.otm-r.com/adjson?tz=0&w=300&h=168&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36510&cur=RUB&bidid=22d409aee902ea48&transactionid=434d95b1-71e4-443a-b546-d1c116a8eefa&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=168&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36510&cur=RUB&bidid=22d409aee902ea48&transactionid=434d95b1-71e4-443a-b546-d1c116a8eefa&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=168&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36510&cur=RUB&bidid=22d409aee902ea48&transactionid=434d95b1-71e4-443a-b546-d1c116a8eefa&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36510&cur=RUB&bidid=22d409aee902ea48&transactionid=434d95b1-71e4-443a-b546-d1c116a8eefa&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36510&cur=RUB&bidid=22d409aee902ea48&transactionid=434d95b1-71e4-443a-b546-d1c116a8eefa&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&domain=ritorika.com.ua&l=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&s=36510&cur=RUB&bidid=22d409aee902ea48&transactionid=434d95b1-71e4-443a-b546-d1c116a8eefa&auctionid=8953fc68-8809-4258-b4c1-f5a020f93358&bidfloor=0 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.7
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjNlNDJmZGQwODg0YzNkYw==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
ads.themoneytizer.com/bidder1/moneybid.js?siteid=88050&adid=19&formatid=26711&size=desktop
200 OK 533 B URL HTTP/2 ads.themoneytizer.com/bidder1/moneybid.js?siteid=88050&adid=19&formatid=26711&size=desktop
IP
ASN #60068 Datacamp Limited
Hash 0e72a30985ec507f3b44f3e36b9fbd69
429728d6c63cd8c2a6f9944cd336a78fef864276
dca98553d3e3036058c31423bfbc0a481708bef6d1a65a6937fbf91b87e670a4
GET /bidder1/moneybid.js?siteid=88050&adid=19&formatid=26711&size=desktop HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: http://ritorika.com.ua
cache-control: max-age=604800
x-accel-expires: @1676477173
server: CDN77-Turbo
vary: Origin
x-77-nzt: AblMCRT/gvr/aWcAAA
x-77-nzt-ray: af585630a068ba6cde2fe463c9815f2f
x-cache: HIT
x-age: 26473
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2650c6807020228fe8e5d4cb1833c568
02457a75541926bf734f210a1d2dbf1029a7460e
049bf2c0a4d8262b827f3b30ab378a9cef281e365d4dd990a0e9d46ee5b70a19
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3037
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:26 GMT
Last-Modified: Wed, 08 Feb 2023 22:36:49 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 5aebea131b9dbe928fa89c601d1d5fa5
b9a4bff3229f2a22f136b96a818b7943ec957afe
ca5882cca39299cb23fe334f0f90b538db28f6e61dcb0bfef027f1475a65e564
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5886
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:26 GMT
Last-Modified: Wed, 08 Feb 2023 21:49:20 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
prebid.smilewanted.com/
403 Forbidden 2.7 kB IP
Hash 8ef4ea6eb8e85db8548726987873a9b3
7aa0d808dbd1662b525af26cfaba0d6d7091dbee
0a86841f1637f1ca2c49538724e3b6480f601694e88f7b5e646a9ead36ce21c5
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 409
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 796822d0fa54b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2231
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: max-age=0, private, must-revalidate
date: Wed, 08 Feb 2023 23:27:26 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
mp.4dex.io/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 4714
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:26 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Parsing the Prebid Request. org/site not found
x-version: 3.0.0-gcp-ams
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822d12bd4b51b-OSL
X-Firefox-Spdy: h2
pbs.alfasense.com/yandex/auction
200 OK 11 B URL HTTP/1.1 pbs.alfasense.com/yandex/auction
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cc989d2e211083e0a170316914f1d06
392cd18d051f72b887529ac2998da54749f1338f
846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b
POST /yandex/auction HTTP/1.1
Host: pbs.alfasense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 268
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:26 GMT
Content-Type: application/json
Content-Length: 11
Connection: keep-alive
Expires: 0
X-Dsp-4__status: 204
Access-Control-Max-Age: 0
X-Geo-CityId: 4000000055
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.100.20
Accept-Ranges: bytes
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7be1d8bc7bd8dd840fe6fb8dddcf9a1b
a68887a90771301f0c0830107e173d79ef1be3e6
49f3004a94e27e95adb7d901fc34063e93542a4c5334fc0aa9d6df89f38cbf44
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=139645
Date: Wed, 08 Feb 2023 23:27:26 GMT
Etag: "63e39d1e-1d7"
Expires: Fri, 10 Feb 2023 14:14:51 GMT
Last-Modified: Wed, 08 Feb 2023 13:01:18 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: N0T1wrChxlPDRbxiMQH1HosvxeY-1ARC31ujQIseiUf_n0RLZVicQQ==
Age: 4413
tlx.3lift.com/header/auction?lib=prebid&v=7.35.0&referrer=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&tmax=3000
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.35.0&referrer=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&tmax=3000
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.35.0&referrer=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&tmax=3000 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2258
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-dpr,sec-ch-device-memory,sec-ch-save-data,sec-ch-ua-mobile,sec-ch-downlink,user-agent,sec-ch-ect,sec-ch-width,sec-ch-prefers-color-scheme,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-arch,sec-ch-rtt,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-viewport-width
x-auction-status: 17, 17, 17, 17, 17, 17
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 53dbc03348105d21e0ccd7e983be5520
4811eace2881146376c000b56fe2af0592f58a9a
62a465c93f5f2e5b3458ef0d6b645578d23a1ebafa4c2b614707b58cb83e7d8a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A465C93F5F2E5B3458EF0D6B645578D23A1EBAFA4C2B614707B58CB83E7D8A"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7571
Expires: Thu, 09 Feb 2023 01:33:38 GMT
Date: Wed, 08 Feb 2023 23:27:27 GMT
Connection: keep-alive
ib.adnxs.com/ut/v3/prebid
200 OK 7.4 kB URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14713), with no line terminators
Hash 7b1e86303744be45afb82ae1237d51ac
b00ff704e65c542f9ff73408ed09c7b7208003cc
4020f5838429e1fe6a166396bc2aecf12859cc65f187dc94e6106275ae8ef9f5
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1506
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://ritorika.com.ua
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 2a92a10a-2fad-4715-bf46-9e6a3466319e
Set-Cookie: icu=ChkIqs6FARAKGAEgASgBMN_fkJ8GOAFAAUgBEN_fkJ8GGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 23:27:27 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=4217658613371512484; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 23:27:27 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
Content-Encoding: gzip
ads.betweendigital.com/adjson?t=prebid
200 OK 614 B URL HTTP/2 ads.betweendigital.com/adjson?t=prebid
IP
Hash 886823dc9d4fd160ca3985e5b8030474
542cf249f726ff120a9654e8efcb0e550a0f59bf
6b002722b004ac65c1ffb9911ef875bae59e866ee78fa47b6f6889f48f3247d1
POST /adjson?t=prebid HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 458
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
tuuid=52675963-690e-5228-835c-7d67e0b852b9; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3gAIAsh6kbNn3YLODMhxz6uQbra6DQ2nXQ==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:26 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903489
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903489
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903489 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=9a9561bc79a2493b9944864dfa8859e1; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
dmg.digitaltarget.ru/1/1093/i/i?i=26701837910728.524450096523950&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=26701837910728.524450096523950&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=26701837910728.524450096523950&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1675898847044&i=26701837910728.524450096523950&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=0ME5Ln-Z9y33r0i7s.CS; Max-Age=93312000; Expires=Fri, 23 Jan 2026 23:27:27 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=26701837910728.355646443411453&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=26701837910728.355646443411453&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=26701837910728.355646443411453&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1675898847059&i=26701837910728.355646443411453&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=697RDOLZ9LugGNO7sdMT; Max-Age=93312000; Expires=Fri, 23 Jan 2026 23:27:27 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
yastatic.net/partner-code-bundles/718954/b887192c4a62fd372984.js
200 OK 3.5 kB URL HTTP/2 yastatic.net/partner-code-bundles/718954/b887192c4a62fd372984.js
IP
File type ASCII text, with very long lines (9149)
Hash 0167a734927051bb685225f46e250151
862c9fa361919574f12bd9950c06d5d8b259cb8f
2ee53dfadb6a5ae29fa5193eaddcb766b80bed937efdc7b03f1e2fbdf0d2af1c
GET /partner-code-bundles/718954/b887192c4a62fd372984.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: text/javascript; charset=utf-8
content-length: 3549
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "0167a734927051bb685225f46e250151"
expires: Sat, 08 Feb 2053 05:58:45 GMT
last-modified: Tue, 07 Feb 2023 15:31:43 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 8.4 kB URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
Hash e939782f914e42ed1e95e5f55383e7d1
9adb62277d2daa4e4c68f9997ead2be9bd9b5585
82e1a322f5adc3b620447e698cbf1f9157202d014dad828261c24decbd32a24c
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.23.0
date: Wed, 08 Feb 2023 23:27:25 GMT
x-request-id: b2d94623-1bd3-430b-b318-91c08ba261a0
set-cookie: bvuid=inu27j8m10; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=inu27j8m10; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=inu27j8m10
X-Firefox-Spdy: h2
id5-sync.com/g/v2/12.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/12.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c0b8a3fb879aa20a0a8bdd31f3e0abe9
0283f2ace32152d5a37cba0fb51d8a26f922b20b
c4345278e2b065fee05b86f4e692ccd388cd73b405b0004f2e3c6d6ee978f566
POST /g/v2/12.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 456
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Wed, 08 Feb 2023 23:27:26 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 44bf378d3750537baa26c6ee0d8a9bed
693e6f2b0c03f45e7fafa193a1827582c6161fc5
2e2eff7bd87e95bd7f7a330e30ff78a0cca8cdb07cc1915644e2f302598321fa
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96740
Date: Wed, 08 Feb 2023 23:27:27 GMT
Etag: "63e2eeb8-1d7"
Expires: Fri, 10 Feb 2023 02:19:47 GMT
Last-Modified: Wed, 08 Feb 2023 00:37:12 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dx7vPrlvzenRZv4SpqLDOZwvxMwrmaERXXp41Jyu0H_iWTEz-tivaA==
Age: 6155
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1675898847044&i=26701837910728.524450096523950&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1675898847044&i=26701837910728.524450096523950&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1675898847044&i=26701837910728.524450096523950&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 8
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1675898847059&i=26701837910728.355646443411453&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1675898847059&i=26701837910728.355646443411453&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1675898847059&i=26701837910728.355646443411453&a=77&e=1303420ADC2FE463BC0A4B7F027C34DB&pref=http%3A%2F%2Fritorika.com.ua%2F&c=ss:77.up:1303420ADC2FE463BC0A4B7F027C34DB.sync:up.xdua:duQ5hgJ_hXMpL3mwHeCqnpiN.xps:xpsEcrptTc0NBhDw2byUkEOul.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
ad.360yield.com/1602/pb
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /1602/pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1671
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: http://ritorika.com.ua
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
301 Moved Permanently 167 B URL HTTP/1.1 rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /rules-p-6Fv0cGNfc_bw8.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
X-Cache: Redirect from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: x9mCVJOIRmUDhNxfZccbk3FjaGZDvstY30FaMBG9DGplLHFqid19tg==
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: *
etag: "63e36f34-2b"
expires: Thu, 09 Feb 2023 00:27:27 GMT
accept-ranges: bytes
last-modified: Wed, 08 Feb 2023 12:45:24 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js
200 OK 30 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/3.0.0/jquery.min.js
IP
File type ASCII text, with very long lines (32034)
Hash c54aac7ef64c39b4f384e0d5771d3b46
d3e059104378a3844862a5ed12a13f5d423e86b6
3e1b5002dd64d185f806edeefd333348f423584d876cfc966b5c13884c8fe3da
GET /ajax/libs/jquery/3.0.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 30186
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 05 Feb 2023 16:11:28 GMT
Expires: Mon, 05 Feb 2024 16:11:28 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 285359
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
ads.betweendigital.com/sspmatch-js?p=42565&randsalt=8417562046&crf=1
200 OK 0 B URL HTTP/2 ads.betweendigital.com/sspmatch-js?p=42565&randsalt=8417562046&crf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch-js?p=42565&randsalt=8417562046&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:27 GMT; Path=/; Domain=.betweendigital.com
tuuid=1821cff9-5e86-5228-b6f1-ca63d515e5bc; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:27 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3wADBXClHxncvhqCkrdhkHro_gMMJKKCaA==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:27 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
200 OK 43 kB URL HTTP/2 cmp.quantcast.com/GVL-v2/vendor-list-trimmed-v1.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65512), with no line terminators
Hash 42460b167838fc0c360ba5eb62053509
58d664753341e4e46d065d020237bfa95367bba1
93b9c1ecd49492537954c11be631daea06057d987576f97af6733b45017875ba
GET /GVL-v2/vendor-list-trimmed-v1.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Wed, 08 Feb 2023 03:00:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Wed, 08 Feb 2023 03:00:34 GMT
etag: W/"932f140989a99db727a15dd9dbf5a7b7"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zTiwJFB88TVv9P0nMNFfng_phogi2vNM6vCry66AB_ikZItRnSvLLA==
age: 73609
X-Firefox-Spdy: h2
ads.alfasense.net/adserver/www/delivery/asyncspc.php?zones=1&prefix=revive-0-&xcampaigns=%3A%3Acpaex%3A%3Abetween%3A%3Agetintent%3A%3Adefault-stub%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3A&xsite=4444&xsitename=ritorika.com.ua&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat
200 OK 1.5 kB URL HTTP/1.1 ads.alfasense.net/adserver/www/delivery/asyncspc.php?zones=1&prefix=revive-0-&xcampaigns=%3A%3Acpaex%3A%3Abetween%3A%3Agetintent%3A%3Adefault-stub%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3A&xsite=4444&xsitename=ritorika.com.ua&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat
IP
ASN #52000 Innovation IT Solutions LTD
File type JSON data\012- HTML document, ASCII text, with very long lines (1533), with no line terminators
Hash 165c139a6ebb4b268fbc8f877d465cf2
85940b5cbefd1c48dc8a3266094955e883dee8e5
4edd0329ec55fe6c46e4d11ad947678dc3af9d6762f1e1ac1cfdd8a69f6fc0fd
GET /adserver/www/delivery/asyncspc.php?zones=1&prefix=revive-0-&xcampaigns=%3A%3Acpaex%3A%3Abetween%3A%3Agetintent%3A%3Adefault-stub%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3A&xsite=4444&xsitename=ritorika.com.ua&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat HTTP/1.1
Host: ads.alfasense.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:28 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
P3P: CP="CUR ADM OUR NOR STA NID"
Access-Control-Allow-Origin: http://ritorika.com.ua
Access-Control-Allow-Credentials: true
Content-Security-Policy: frame-ancestors 'self';frame-src 'self';
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Permissions-Policy: geolocation=(self), payment=(self)
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block;
Set-Cookie: OAID=01000111010001000101000001010010; expires=Thu, 08-Feb-2024 23:27:28 GMT; Max-Age=31536000; path=/; SameSite=none
SRVGROUP=common; path=/; HttpOnly
s.alfasrv.com/events/1x1.png?s=29866&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29866&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29866&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29866&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29866&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29866&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:27 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
v.alfasrv.com/stats/2x2.png?s=29868&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29868&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29868&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:27 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
yandex.ru/ads/adfox/365825/getBulk/v2?dl=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&date=2023-02-08T23%3A28%3A22.734%2B00%3A00&pd=8&pdh=1024&pdw=1280&pr1=71298059&pr=2314821799&prr=&pv=23&pw=3&extid_loader=&extid_tag_loader=ritorika.com.ua&ylv=0.718954&ybv=0.718954&ytt=58275727015941&is-turbo=0&skip-token=&ad-session-id=1885451675898902718&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A250%2C%22width%22%3A300%2C%22height%22%3A250%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A474%2C%22top%22%3A631%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=718954&available-width=300&available-height=250&yaru=true&pp=bimw&ps=fijv&p2=hayo&partner-stat-id=164153541&slotNumber=1&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=657518%2C0%2C13%3B685681%2C0%2C25%3B718868%2C0%2C81%3B716605%2C0%2C91%3B719185%2C0%2C86%3B717981%2C0%2C60%3B709000%2C0%2C42%3B718954%2C0%2C37%3B713622%2C0%2C71%3B716919%2C0%2C60&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUnZdYuCcFs38W4uizTpdlv033coyrYkO3STLVCkjuI5HM7lzBl9n5BpRRmWJeEcZzJDAskaMVRymVMmFyTDVJJKprRM6OTV2%2B%2BTL%2Burh83k1WTz9e%2FJi8n95vM9%2BQi%2F%2BrHl%2Bf7kx7sXkwXikuE%2FGsyFXJSoljmjpUQZH9gL1uA%2BQGCHTmS1ALhCSYFHh8OHnFREYPAvnfMZFXJJxIw2QiLwXXCTd4HvB5H7ZPBfgYyKQtaMZk0q%2BPExT4PGAPnEvPRAVF7gzCWkQhYowUULBSAJqirMzNkJXNcL%2B75UeCn5HKzhnwKkKMNM1gVajaDGDkW%2BE8d7h0hVoymWXJB0vpIZ4Qo8a6OWqNRmOX0NjxlOheS4KAbQ%2BHU9hA5t5wDd8KGXFarqxnzL2A4tbw8gZgyihRlTYcolb9gCryDkkMSpJFxWUCYLVJDsDKgT%2BNEeFGUq%2BitVtx2SoLpNup4xgoVW6EXhAawowENaFStZN0lBUolq0qYVUsIFdLYZzbYt3%2B41bUkXWNICbMkbvCcC1b4%2F76HtRp51KDihmwIzTmg1sAztILC9oW0UBfawWPe9QytwCHJ65vTYc8OjntmDFARICWph3KSsNNUsoPquJremIl2pt1Eu677d%2Fd3DpmfmOZEb61CoWuS87baRzfisnpHKIcaVpAnHUHqjtrpZv7%2FaDCzdwIn13XPyGii9kjNMpjMhK2E%2B0vPdWId9haoMv5askRktEamMlG%2BFjhvsz0sYnYOzcJacslFPjC3t0I%2BCkwcqChCMJEZzx7YC3aZvcOXIvAG2WJIMCJuUwCZGW8%2F2ujHT2naMIxPKVFIZykjDf%2FtJhBVSfmuHoReXaGWcFT6UZhfnLFfdxGtaQWEIUmLgg4GpY1nW0NazXH3nOqUZVuTBcWUcIL7nA0xXSopHGVa1uztPKvo0mnth6BybAxXCz6VqUKjO5yDsHADybAbZcq3T1gVGrJKlUioLxAga3dsZHOpbVhflmhHKiFjJZAUdj5c1ZeaABWHQ9d6uLrrRk3LjUPNhcES9ioThkCKYGzDA0hSyxA0s4ceub9sD27aK%2BV7f1DAzSDU1g3h%2Bx7opbSoBpSxWNZau2WuYJX4vPSVLIU6cJKSAqJmPi8PgUUvF1SlMo%2FmZ03cYZVMIolWIBILNCSgAoi6Ro9TczXHkhGHPjw5E0zsMVig2JUkSkFuqYwSjRXFGn1iO5%2BqqmzKUOObvQolah%2B%2B2Y7Nv4NuOZfr%2Bic63%2FUcsdsUxw%2B34YTjDHNS70T%2FbdwJtrYQQwzlwzgy02pSkZrvI7Qi21SisVB3EcLWbezXDiZniA%2BBoxx60EsxABnVdQTfNMORD0TZPmZpwnBuZKLBj2%2FMGYDMiWk96IBCPuaBmIDd0nIGkTutSljgjSAIIEmTRzmkzRuwOF5W0Tv83xkiQZDhH0BRPXBg83wqCQZh4iZiQoNoarMDPxdkPguCwxGn9O%2FJMy2GqFHWrfSUvzngV2mHXUKmS9bTqCgnliqZIDiIT6%2F3BXFFhFAfxXk3ljAAMCF9tr4RVbb7c0D6ZH3XrkUUQu13Z9SyeuhkHYexZ4R4FRlmmEIyCMwgirxPCvZN1kZnPchxLx7rXGEqO%2FVR3RIFnu7u2B1UDkhmuCkUjXcfSMqulda2YjrfGI7wwco9vIabmO0CaooPVgbW5rGEiwHAENb%2FA5XisTj59lve3Dx8uRxudFTnjvVUz54k8dlv%2FmeTAQtc1r24vWDBrKVg7Y85NvSCGBaVbj4ZH5wXVe5t29AxI1LXUYyBtpQ7Ds%2F0qr9df5eVme3F5%2FwgcqaCL5BwnKJEg6o1LkQXqYdDXmhqWMyi5XvWpLVlvug3MrHarB0mFgSWN7R7alteJE8akHl%2BiARWoaaMNdMtQzXR2dsn1dN8X6M2qZRrZaui%2B2ffJp839h8tyfXexvemm8PXt%2B%2B3Vhn9YX21vLiavnB8DVB%2BkR68INMeCpJZJoSpBbZr9A95Ortfbq5d3D%2BDbv%2Bubj5uv8Pn37fX6YvN58Ohifd0%2B%2Bfhtc6O%2Fvv6yvb%2FVH69f9n75eLPtnirkPQI8uFt%2Fu7r9dtn9%2Bdud%2Fv%2Fhbv3yZvPP56Mv%2FLm%2Bvd62pu9OX7HfvofUmtMX7Op8YKzqE51JPFjap4p7NxQVIOgIUBPFQHR2a7IE5kICT1fmU2IvcE%2B20KF0f%2FVBMFM7FmrVLYfNgtDDft9xSO8kxXWYqzcnZ16eRv6OM1HGs%2Fn4ZUH7YiU6etUSdct70Q5ivXSA0EsLBGeCCmfDUz%2FcX40SFVj%2BWQhgk2GArm5v%2F3oOztG2CMvtaZj%2B9FIS5qRWPrpNbEfH5inlaoGQ0ONzLOBjqhwT1ck9VL3bg6UDVj8xhA7jLjunoJekyBLgToKNbw96KKqQFjUihk16EBkrtqzDK7luOXqGpeoHBHw%2BU7VKSthJD9tV%2B7IQq6rusb0x4M%2FBNg%2BkAWDS5Dlg4bKGRioA8Wl37cxb0fPUWLXT5UQPxv74dad68uPdj%2F8ArziBww%3D%3D&use-server-side-rendering=1&pcode-icookie=Iigrgrqsqo2%2Bam12OBys2jFrLVovMk1AqeKLKyE%2FKPOiqZLQoe8QLWrCa1xgZOWimfwleAlSkxprxQbNR%2FT9inOk34Y%3D&top-ancestor=http%3A%2F%2Fritorika.com.ua&top-ancestor-undetermined=0&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1NDV9CkqjoJDkJoqAILDOKmzyj5tQQ779qKp_XbquX5d9W7_h8rXltjutW7WtiQPZrY6TqKH2IZNuuk8UMpGuG17XxV3KLXfd1p_A_gbqCWwLYyDGCCAzrymFTDe52XiMEGOEAQExxgixkAloBp_JcpnoTDbTYsBgGgy-y8BnWosecwGZDD5DwMB2mTx3EGTgL5Amk71gTJdpuAwYzQVz0aEuBz4DqnuOqAyoDOhME3zwgCMGXPCpC_4L2GJymaxFGVlYGFpqrCxPSMOWO6sy0RalsXBkQlpk8WYpq8ExMYb7csZj4BwpLbPAaOZRlqKCBYi9a4MEwOH-UJqCIKHSuEwwMo0ZYGuHDQwVavuwnHkv8AvcLMVxF1asmfsyzGLyesSf2bIK5qLFWqR4w8bMctjjLAB7EWsZM5hoLhPygj66jCBr0fOm0y748JmAbXjShfHSxlx2eafDsrC0YIIcrAMS6jAN6uHJZgBhAaF0i7EGxgxcPf2cRTnguGfJQvL6XsdneRDxAT_VjTpAwZgeDSVPA96wBwEVt3wA_2JeOnG7SHuaQ0nBW4k6cGp-uiaCD5_aXSprem_klUDEBx1QWv4g4oPmgk9FLCSSUVIR2woySiqhXCizKYGjnKNC2LCmQtgwo5CQwXLJZQqRCBBpCSUioSO0iQhlCqHtkNmkCgKZ0BXJpSQyuwB2BmF3AMvJHHCpqeGDm4EnlYiJFEJHJFRIyRRiMlcKx6GQSUgcErH8oEVyMptCIXbEchJioUtkSwngFlq4ItmChyuzSYW0lFRkcjh5YdhiBSGhLabtAdvijKJBLhpFRi214diOCBw5oSOTS8FxRcQS2I5EusuSE4hoKV0mqK8pM8durvukxzwqjGntNGNDNRVChb8-MSkJ3IKJSL7DTrCRKuB4KzuOWALbLTBECrnUJV66zu5EEgr5DjCDEiooZLbQlSlgSQiEDimBTOaQS6TC5W5_sMvMDtsNmfJmHQLvyKVSWxzAq1F7_DMTejSz0TDuxNEsUD7SFARy2TCz1CByyWwROELJzkfb2QHGqaUD3o6zDZB4CH10hQbhYagBhNzmxArRTBdJ6xOK5UQKMSxnCnI4wR3wHp8exievX0oIa-pBNj0bxIdXZm8RI5ClRA7h7SyaQYZAtkjL5FtclA8M3PWrFaxfmwgHyAICjA6y95ncCT8MbDWEgTgZsUxb9BGGzMRa3wej3fpkhR6ICQ6s8WUb8Sc8WlrEATPrP7Juij-gLVgtoiBPBBigItAICWR0-kUP0M5VtUg-uIrxbgDaIVRIbZlLN6Cr83AoSPQpL5OIbD2DnY2OUEIycTMmPAWBUCiRJiYURBQEYpKtTrnIUZAL5XBsj5vb6JafaBlKJaQQi6YmBqUHtIhcbNtSR9yrCG0gCSeqgv7a7ts8rmTP7xuygTSzjbD3RH5OPXZKqsfdILgNevoRPggPDp1YPpFILJSTL4Vi_ga8ZoAuuUR2117O_a5cCIuwHPj6diGByCEkoJDJRcSuzosT21KheF3tul4SySYqsIEVxtj1-eBl2NxrukfEORha4MKFEYM3adBZH_RMQSAklog3bBPZLulOZ3rYsIfnbjIryIjkUrlIKFYIJeLO5GpaTlShnCiNq6lLthRwa7g2GS0lAmDSLIDUCKipx3cQ2XSz0AuS07ZlsDvd7BTanRXhcl4AEFNTQvC92JFTD-NMUOI7c72Pthf44DDrg_Lmuv5G3f3sO9t_tHFy3h_q8oN5WE0ERV0moTFNZWL--Z479Tvwzepnns3-NlZ3c6x93EW7DmFQYOzyeOqfc9qy23LaRj9FF4bsWY5prb0P1lfYyuc1pwHW_Z_HOMU3GOFOYStTDbNvbA880IbrBqUZmrnjx9s5C9xIt1xzX6Y_AMrWJU7tPnS8r4c0kWRYob_Cznb6u6fik98yyjXxStF58fm9yjHdP7ihZG3zlvfeDDynqWxO62mmU1Pn_0sL86rxRU4Joe0QTEs-2jElF5RxJMyBj7K3HyPQcv8sZ0_emeLkNgyNBENFtWlP1mT73zganP4ZYa0cNUblBc5S7ZSMPXy8_8kzCxizLWY8902EmQqJgbsDbh81NIf5ZR6Hy3iroP8B7P-aQXxDQ-ke7CxEp_Z3uj21T36RqdpA0XkMXdsDK7BMbT0TRcGuG8zlM88bb-2_TQldytM8qk9K7L7QPvN9-NPAhivKop0afUyr8aX1FxADV9m-En2BnUyfnnwyIEd7LSObpqNNakPze92Oo11z3IqfaC7AAM2ZvO8kfAAVPNsNbWq7t3G6EHAno1K8PWtm5yB3tl4OHeEWcNTXG4-rVo5gGKfFTTh-lcmYSJa-1s5v0g6l2xIm3OsBd-c_BZJbXV24sn-rhk_DROleE8OnBCGaf6-oN2rAr6hRlsyNWrN6nnOPMwNAzzR7fz2GeNpKm4yu6IJ-rsMEdxaIs-FtAoPZKv-ncw8kxVo3-qyBg56a7dTPxKkMqccxCH1tHyF2976oOArhQNE_3BdeRQ0z02D588IoF-RvynUAy5kzoWei_9vAz-G1_7oRdHxYezRGfbhndxmGfr1KkFfecNYzg1Ef8Q6aP9Y89dTrTXRh3dQqi6vpao3nqbIfLI73XETPi6PsBq0xnQnmaPHSTRPg5PhpRpe9DD_pzAyn0y8pRcOADO3JH0Z-_u4BQOWCHrWNSBNeldCmnzIt1dE3sTqUA1n3-AKKx0Bxdoe6OcoysCfkDdVCnzFsQB9UatEilTLgyp9y_JJ4TXZcDQrKCUJWVapft0Z5OLMLeSmH1dH0rb61eMrPOu2IpiSwnqrcmFhhE1JyWUo31iVSA17okji9TzExw4dJ15H0zea-FdPxO_gp06frKBIzHDz9oNKtJKyjbsQX0cdvA8zTa3423nS2By6oKuL2s8xh3lJPlCPuZaCvntv6f6F-bB1sd4LG6cZRqs4o9OmtrMLq7O_ChfCA-WF4l97IyaaLNbrwHwSOOUJg3Dnww6z4X8rl7mrfaUakSlzlMS87YTGMv5_U7NY3h55vPm5-Br05GNck8u-PwmeHXp6A3cZgml4J99-ehQdk-pdtngbY9ywc9w9zgEGvxFH7sfXAvP9mBr26bQ9pYrfuc023h8de7xj0QdP-x77u_ift8IbyxvFemixlBzZI31zQ4TvlbynK8kqYN5_fNFfrbLNNPjMP7XDOTtJ3kcj7zMBTWG2ssl_Xs21HxqFr6OGUeqvCy9UnNUY7nj-ZXKTpB-DFhijba0FP__W8O008GwC1l5qpvbKwpien_GPqfVWbaOp_0hyXDmwECEarjLVDBpAOs273ttv0hPtpSuJTtdzQ50c6TB_kjdl4S2-QCR6QDipnTB7zf14qWTCCGgnMBuNMoJxSvE8Pu63eOLCKl4HV61vFUJILez-L75jM2fphvROdaw8dhURPAOUxsGfe8fJ0x4l1wgruhe_ljeHd1YdW-jUjMzaN-_u9Fjl94EqZpoEZ-voZXUyul97WwjqSmn-6Ym1T9tnv_azf2mD5tjr-RpUBL9x2h_h5MmFJZO7tdGYQqX6fsLPg2Jr9w1ltbKI7Myl9nA9Hh-1fDO-x8W6jssIbm7dx6yjzU4ZG9Xhw-jqc4LfhWn4IpWNyu2oYWQNZEafLmOtZQgX3OI8tK5qkdgUuZUEaaRBE5UFJPQr5mmEYzfIHBM_d7wplqzJ60bI0nqXGswbHRRwGHWvqCjC65REFlXDjnP3T2rbTmFs7X6N07uhuuUZ-Vj4ckTeZk9U4v4G_9GnNkd487fLnmzHvrU4BXbupP_eUJjqpWLQWdzpuUm-2NQV1ds7W7uzzrMufK0XgvFz2xkbfTo0_K2c2YeF3YAzIM-I3ypcBZc3e6A13WSgvAH0V5D5wkzfkdVdRTqmb82mwft23Jp1VUQnTixNZG8NLAasz9dbBFIPytzyg01iHxm4F2l19chhBHL43gOfzLnO14ySa9miFk8pU1-g7lBBVZ9BMOMF9jRkudUbeqpiRXXy6QbvW-Ko2U1Faz9kGn_U-ZK8VLz2dJZ3UXszneVdnEI6srB-vL6BXyRvRKJxo1SEb9_XqxXLLRRxqCL3JjSfBjOqg4W0iKg3zxLS-F6cQu8LGXFC0Mw1T2aGc4zOsC7CX7WH2XWBFCy3WajohKG2JcJ6_MKID44VZok7BLatcOAMTjHwvrX7kUJAadh3Kx0vVkL3AGnXKQvNot8GsMYM-Zd-NC-Vd_7Vxi610gJfAlsokCrJUsYDzb8Mosj64_ijt_wx9JuiPNCAjLxaHUALkycmnj6OiYoDaVedHqVnoFnLpHPXr--5WqQ877arwQt3cfW__K9T6G-4VeuNssO_b-FfRHi37RKCNfhyGPs6UxVyWeUbknoE1m0KZnaAP0n3SYTCg-lro14-h_nc7sbk13qkwAqFELLalwobxWn5_XdfJrCOAXtFHoxwpw0X7M8L8TqdWXVp8bQRO2NNWn3SjOeWyfgpRGThD51aihtct61AqEjerE_6h3R3qxpBNAt8-oa84aSba3qpzFy3porh1wpxoHbDv0cFqg_PqmVbxLkPY_fLb7yj9nxmHbfbT-6OCXo9JjTzp3eoHNd6wmwC9vbqqQj7aDqH18Z627cBKnJOxiVlGQZbhc7oHRpVf0nFBzyTkr6vWVGqoDH70RD1CnShRKN59wYgHJp_o0uGml4Eb_X4hVFpKzJZCRk8dKsKnT-0Rkg8axLVDr8IKCilKzhJxx6gcgCCyhUlF8Cg4DlSfI_l3w2xl_qSgahJWOgVayzbvs8gvKeTqrFfkQlEXclYABMInJdBZloZvWQbq90-KF9zULC-YD3R3Jhh_ne0u7v1iVSa8T03SAoQcmvwqUeq0xWh09Qdno4zuJL874f0ZWomwulZHXf9iUQa6BCh0BZlodDUMgJRI9LdKooNHUA_0-QVqJ2iB2rsUeOHyF08ntVyya6KW6--1rLc7j37IMGKVmtngblWrgfzbipEppGTnyojEkzY4vuB0wrMyLnVAXbbeF_k5yQ4Q0ev5_MZmi3XoDOA3TduVB7oWTlaemnU5&tga-with-creatives=1
200 OK 168 B URL HTTP/2 yandex.ru/ads/adfox/365825/getBulk/v2?dl=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&date=2023-02-08T23%3A28%3A22.734%2B00%3A00&pd=8&pdh=1024&pdw=1280&pr1=71298059&pr=2314821799&prr=&pv=23&pw=3&extid_loader=&extid_tag_loader=ritorika.com.ua&ylv=0.718954&ybv=0.718954&ytt=58275727015941&is-turbo=0&skip-token=&ad-session-id=1885451675898902718&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A250%2C%22width%22%3A300%2C%22height%22%3A250%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A474%2C%22top%22%3A631%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=718954&available-width=300&available-height=250&yaru=true&pp=bimw&ps=fijv&p2=hayo&partner-stat-id=164153541&slotNumber=1&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=657518%2C0%2C13%3B685681%2C0%2C25%3B718868%2C0%2C81%3B716605%2C0%2C91%3B719185%2C0%2C86%3B717981%2C0%2C60%3B709000%2C0%2C42%3B718954%2C0%2C37%3B713622%2C0%2C71%3B716919%2C0%2C60&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUnZdYuCcFs38W4uizTpdlv033coyrYkO3STLVCkjuI5HM7lzBl9n5BpRRmWJeEcZzJDAskaMVRymVMmFyTDVJJKprRM6OTV2%2B%2BTL%2Burh83k1WTz9e%2FJi8n95vM9%2BQi%2F%2BrHl%2Bf7kx7sXkwXikuE%2FGsyFXJSoljmjpUQZH9gL1uA%2BQGCHTmS1ALhCSYFHh8OHnFREYPAvnfMZFXJJxIw2QiLwXXCTd4HvB5H7ZPBfgYyKQtaMZk0q%2BPExT4PGAPnEvPRAVF7gzCWkQhYowUULBSAJqirMzNkJXNcL%2B75UeCn5HKzhnwKkKMNM1gVajaDGDkW%2BE8d7h0hVoymWXJB0vpIZ4Qo8a6OWqNRmOX0NjxlOheS4KAbQ%2BHU9hA5t5wDd8KGXFarqxnzL2A4tbw8gZgyihRlTYcolb9gCryDkkMSpJFxWUCYLVJDsDKgT%2BNEeFGUq%2BitVtx2SoLpNup4xgoVW6EXhAawowENaFStZN0lBUolq0qYVUsIFdLYZzbYt3%2B41bUkXWNICbMkbvCcC1b4%2F76HtRp51KDihmwIzTmg1sAztILC9oW0UBfawWPe9QytwCHJ65vTYc8OjntmDFARICWph3KSsNNUsoPquJremIl2pt1Eu677d%2Fd3DpmfmOZEb61CoWuS87baRzfisnpHKIcaVpAnHUHqjtrpZv7%2FaDCzdwIn13XPyGii9kjNMpjMhK2E%2B0vPdWId9haoMv5askRktEamMlG%2BFjhvsz0sYnYOzcJacslFPjC3t0I%2BCkwcqChCMJEZzx7YC3aZvcOXIvAG2WJIMCJuUwCZGW8%2F2ujHT2naMIxPKVFIZykjDf%2FtJhBVSfmuHoReXaGWcFT6UZhfnLFfdxGtaQWEIUmLgg4GpY1nW0NazXH3nOqUZVuTBcWUcIL7nA0xXSopHGVa1uztPKvo0mnth6BybAxXCz6VqUKjO5yDsHADybAbZcq3T1gVGrJKlUioLxAga3dsZHOpbVhflmhHKiFjJZAUdj5c1ZeaABWHQ9d6uLrrRk3LjUPNhcES9ioThkCKYGzDA0hSyxA0s4ceub9sD27aK%2BV7f1DAzSDU1g3h%2Bx7opbSoBpSxWNZau2WuYJX4vPSVLIU6cJKSAqJmPi8PgUUvF1SlMo%2FmZ03cYZVMIolWIBILNCSgAoi6Ro9TczXHkhGHPjw5E0zsMVig2JUkSkFuqYwSjRXFGn1iO5%2BqqmzKUOObvQolah%2B%2B2Y7Nv4NuOZfr%2Bic63%2FUcsdsUxw%2B34YTjDHNS70T%2FbdwJtrYQQwzlwzgy02pSkZrvI7Qi21SisVB3EcLWbezXDiZniA%2BBoxx60EsxABnVdQTfNMORD0TZPmZpwnBuZKLBj2%2FMGYDMiWk96IBCPuaBmIDd0nIGkTutSljgjSAIIEmTRzmkzRuwOF5W0Tv83xkiQZDhH0BRPXBg83wqCQZh4iZiQoNoarMDPxdkPguCwxGn9O%2FJMy2GqFHWrfSUvzngV2mHXUKmS9bTqCgnliqZIDiIT6%2F3BXFFhFAfxXk3ljAAMCF9tr4RVbb7c0D6ZH3XrkUUQu13Z9SyeuhkHYexZ4R4FRlmmEIyCMwgirxPCvZN1kZnPchxLx7rXGEqO%2FVR3RIFnu7u2B1UDkhmuCkUjXcfSMqulda2YjrfGI7wwco9vIabmO0CaooPVgbW5rGEiwHAENb%2FA5XisTj59lve3Dx8uRxudFTnjvVUz54k8dlv%2FmeTAQtc1r24vWDBrKVg7Y85NvSCGBaVbj4ZH5wXVe5t29AxI1LXUYyBtpQ7Ds%2F0qr9df5eVme3F5%2FwgcqaCL5BwnKJEg6o1LkQXqYdDXmhqWMyi5XvWpLVlvug3MrHarB0mFgSWN7R7alteJE8akHl%2BiARWoaaMNdMtQzXR2dsn1dN8X6M2qZRrZaui%2B2ffJp839h8tyfXexvemm8PXt%2B%2B3Vhn9YX21vLiavnB8DVB%2BkR68INMeCpJZJoSpBbZr9A95Ortfbq5d3D%2BDbv%2Bubj5uv8Pn37fX6YvN58Ohifd0%2B%2Bfhtc6O%2Fvv6yvb%2FVH69f9n75eLPtnirkPQI8uFt%2Fu7r9dtn9%2Bdud%2Fv%2Fhbv3yZvPP56Mv%2FLm%2Bvd62pu9OX7HfvofUmtMX7Op8YKzqE51JPFjap4p7NxQVIOgIUBPFQHR2a7IE5kICT1fmU2IvcE%2B20KF0f%2FVBMFM7FmrVLYfNgtDDft9xSO8kxXWYqzcnZ16eRv6OM1HGs%2Fn4ZUH7YiU6etUSdct70Q5ivXSA0EsLBGeCCmfDUz%2FcX40SFVj%2BWQhgk2GArm5v%2F3oOztG2CMvtaZj%2B9FIS5qRWPrpNbEfH5inlaoGQ0ONzLOBjqhwT1ck9VL3bg6UDVj8xhA7jLjunoJekyBLgToKNbw96KKqQFjUihk16EBkrtqzDK7luOXqGpeoHBHw%2BU7VKSthJD9tV%2B7IQq6rusb0x4M%2FBNg%2BkAWDS5Dlg4bKGRioA8Wl37cxb0fPUWLXT5UQPxv74dad68uPdj%2F8ArziBww%3D%3D&use-server-side-rendering=1&pcode-icookie=Iigrgrqsqo2%2Bam12OBys2jFrLVovMk1AqeKLKyE%2FKPOiqZLQoe8QLWrCa1xgZOWimfwleAlSkxprxQbNR%2FT9inOk34Y%3D&top-ancestor=http%3A%2F%2Fritorika.com.ua&top-ancestor-undetermined=0&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1NDV9CkqjoJDkJoqAILDOKmzyj5tQQ779qKp_XbquX5d9W7_h8rXltjutW7WtiQPZrY6TqKH2IZNuuk8UMpGuG17XxV3KLXfd1p_A_gbqCWwLYyDGCCAzrymFTDe52XiMEGOEAQExxgixkAloBp_JcpnoTDbTYsBgGgy-y8BnWosecwGZDD5DwMB2mTx3EGTgL5Amk71gTJdpuAwYzQVz0aEuBz4DqnuOqAyoDOhME3zwgCMGXPCpC_4L2GJymaxFGVlYGFpqrCxPSMOWO6sy0RalsXBkQlpk8WYpq8ExMYb7csZj4BwpLbPAaOZRlqKCBYi9a4MEwOH-UJqCIKHSuEwwMo0ZYGuHDQwVavuwnHkv8AvcLMVxF1asmfsyzGLyesSf2bIK5qLFWqR4w8bMctjjLAB7EWsZM5hoLhPygj66jCBr0fOm0y748JmAbXjShfHSxlx2eafDsrC0YIIcrAMS6jAN6uHJZgBhAaF0i7EGxgxcPf2cRTnguGfJQvL6XsdneRDxAT_VjTpAwZgeDSVPA96wBwEVt3wA_2JeOnG7SHuaQ0nBW4k6cGp-uiaCD5_aXSprem_klUDEBx1QWv4g4oPmgk9FLCSSUVIR2woySiqhXCizKYGjnKNC2LCmQtgwo5CQwXLJZQqRCBBpCSUioSO0iQhlCqHtkNmkCgKZ0BXJpSQyuwB2BmF3AMvJHHCpqeGDm4EnlYiJFEJHJFRIyRRiMlcKx6GQSUgcErH8oEVyMptCIXbEchJioUtkSwngFlq4ItmChyuzSYW0lFRkcjh5YdhiBSGhLabtAdvijKJBLhpFRi214diOCBw5oSOTS8FxRcQS2I5EusuSE4hoKV0mqK8pM8durvukxzwqjGntNGNDNRVChb8-MSkJ3IKJSL7DTrCRKuB4KzuOWALbLTBECrnUJV66zu5EEgr5DjCDEiooZLbQlSlgSQiEDimBTOaQS6TC5W5_sMvMDtsNmfJmHQLvyKVSWxzAq1F7_DMTejSz0TDuxNEsUD7SFARy2TCz1CByyWwROELJzkfb2QHGqaUD3o6zDZB4CH10hQbhYagBhNzmxArRTBdJ6xOK5UQKMSxnCnI4wR3wHp8exievX0oIa-pBNj0bxIdXZm8RI5ClRA7h7SyaQYZAtkjL5FtclA8M3PWrFaxfmwgHyAICjA6y95ncCT8MbDWEgTgZsUxb9BGGzMRa3wej3fpkhR6ICQ6s8WUb8Sc8WlrEATPrP7Juij-gLVgtoiBPBBigItAICWR0-kUP0M5VtUg-uIrxbgDaIVRIbZlLN6Cr83AoSPQpL5OIbD2DnY2OUEIycTMmPAWBUCiRJiYURBQEYpKtTrnIUZAL5XBsj5vb6JafaBlKJaQQi6YmBqUHtIhcbNtSR9yrCG0gCSeqgv7a7ts8rmTP7xuygTSzjbD3RH5OPXZKqsfdILgNevoRPggPDp1YPpFILJSTL4Vi_ga8ZoAuuUR2117O_a5cCIuwHPj6diGByCEkoJDJRcSuzosT21KheF3tul4SySYqsIEVxtj1-eBl2NxrukfEORha4MKFEYM3adBZH_RMQSAklog3bBPZLulOZ3rYsIfnbjIryIjkUrlIKFYIJeLO5GpaTlShnCiNq6lLthRwa7g2GS0lAmDSLIDUCKipx3cQ2XSz0AuS07ZlsDvd7BTanRXhcl4AEFNTQvC92JFTD-NMUOI7c72Pthf44DDrg_Lmuv5G3f3sO9t_tHFy3h_q8oN5WE0ERV0moTFNZWL--Z479Tvwzepnns3-NlZ3c6x93EW7DmFQYOzyeOqfc9qy23LaRj9FF4bsWY5prb0P1lfYyuc1pwHW_Z_HOMU3GOFOYStTDbNvbA880IbrBqUZmrnjx9s5C9xIt1xzX6Y_AMrWJU7tPnS8r4c0kWRYob_Cznb6u6fik98yyjXxStF58fm9yjHdP7ihZG3zlvfeDDynqWxO62mmU1Pn_0sL86rxRU4Joe0QTEs-2jElF5RxJMyBj7K3HyPQcv8sZ0_emeLkNgyNBENFtWlP1mT73zganP4ZYa0cNUblBc5S7ZSMPXy8_8kzCxizLWY8902EmQqJgbsDbh81NIf5ZR6Hy3iroP8B7P-aQXxDQ-ke7CxEp_Z3uj21T36RqdpA0XkMXdsDK7BMbT0TRcGuG8zlM88bb-2_TQldytM8qk9K7L7QPvN9-NPAhivKop0afUyr8aX1FxADV9m-En2BnUyfnnwyIEd7LSObpqNNakPze92Oo11z3IqfaC7AAM2ZvO8kfAAVPNsNbWq7t3G6EHAno1K8PWtm5yB3tl4OHeEWcNTXG4-rVo5gGKfFTTh-lcmYSJa-1s5v0g6l2xIm3OsBd-c_BZJbXV24sn-rhk_DROleE8OnBCGaf6-oN2rAr6hRlsyNWrN6nnOPMwNAzzR7fz2GeNpKm4yu6IJ-rsMEdxaIs-FtAoPZKv-ncw8kxVo3-qyBg56a7dTPxKkMqccxCH1tHyF2976oOArhQNE_3BdeRQ0z02D588IoF-RvynUAy5kzoWei_9vAz-G1_7oRdHxYezRGfbhndxmGfr1KkFfecNYzg1Ef8Q6aP9Y89dTrTXRh3dQqi6vpao3nqbIfLI73XETPi6PsBq0xnQnmaPHSTRPg5PhpRpe9DD_pzAyn0y8pRcOADO3JH0Z-_u4BQOWCHrWNSBNeldCmnzIt1dE3sTqUA1n3-AKKx0Bxdoe6OcoysCfkDdVCnzFsQB9UatEilTLgyp9y_JJ4TXZcDQrKCUJWVapft0Z5OLMLeSmH1dH0rb61eMrPOu2IpiSwnqrcmFhhE1JyWUo31iVSA17okji9TzExw4dJ15H0zea-FdPxO_gp06frKBIzHDz9oNKtJKyjbsQX0cdvA8zTa3423nS2By6oKuL2s8xh3lJPlCPuZaCvntv6f6F-bB1sd4LG6cZRqs4o9OmtrMLq7O_ChfCA-WF4l97IyaaLNbrwHwSOOUJg3Dnww6z4X8rl7mrfaUakSlzlMS87YTGMv5_U7NY3h55vPm5-Br05GNck8u-PwmeHXp6A3cZgml4J99-ehQdk-pdtngbY9ywc9w9zgEGvxFH7sfXAvP9mBr26bQ9pYrfuc023h8de7xj0QdP-x77u_ift8IbyxvFemixlBzZI31zQ4TvlbynK8kqYN5_fNFfrbLNNPjMP7XDOTtJ3kcj7zMBTWG2ssl_Xs21HxqFr6OGUeqvCy9UnNUY7nj-ZXKTpB-DFhijba0FP__W8O008GwC1l5qpvbKwpien_GPqfVWbaOp_0hyXDmwECEarjLVDBpAOs273ttv0hPtpSuJTtdzQ50c6TB_kjdl4S2-QCR6QDipnTB7zf14qWTCCGgnMBuNMoJxSvE8Pu63eOLCKl4HV61vFUJILez-L75jM2fphvROdaw8dhURPAOUxsGfe8fJ0x4l1wgruhe_ljeHd1YdW-jUjMzaN-_u9Fjl94EqZpoEZ-voZXUyul97WwjqSmn-6Ym1T9tnv_azf2mD5tjr-RpUBL9x2h_h5MmFJZO7tdGYQqX6fsLPg2Jr9w1ltbKI7Myl9nA9Hh-1fDO-x8W6jssIbm7dx6yjzU4ZG9Xhw-jqc4LfhWn4IpWNyu2oYWQNZEafLmOtZQgX3OI8tK5qkdgUuZUEaaRBE5UFJPQr5mmEYzfIHBM_d7wplqzJ60bI0nqXGswbHRRwGHWvqCjC65REFlXDjnP3T2rbTmFs7X6N07uhuuUZ-Vj4ckTeZk9U4v4G_9GnNkd487fLnmzHvrU4BXbupP_eUJjqpWLQWdzpuUm-2NQV1ds7W7uzzrMufK0XgvFz2xkbfTo0_K2c2YeF3YAzIM-I3ypcBZc3e6A13WSgvAH0V5D5wkzfkdVdRTqmb82mwft23Jp1VUQnTixNZG8NLAasz9dbBFIPytzyg01iHxm4F2l19chhBHL43gOfzLnO14ySa9miFk8pU1-g7lBBVZ9BMOMF9jRkudUbeqpiRXXy6QbvW-Ko2U1Faz9kGn_U-ZK8VLz2dJZ3UXszneVdnEI6srB-vL6BXyRvRKJxo1SEb9_XqxXLLRRxqCL3JjSfBjOqg4W0iKg3zxLS-F6cQu8LGXFC0Mw1T2aGc4zOsC7CX7WH2XWBFCy3WajohKG2JcJ6_MKID44VZok7BLatcOAMTjHwvrX7kUJAadh3Kx0vVkL3AGnXKQvNot8GsMYM-Zd-NC-Vd_7Vxi610gJfAlsokCrJUsYDzb8Mosj64_ijt_wx9JuiPNCAjLxaHUALkycmnj6OiYoDaVedHqVnoFnLpHPXr--5WqQ877arwQt3cfW__K9T6G-4VeuNssO_b-FfRHi37RKCNfhyGPs6UxVyWeUbknoE1m0KZnaAP0n3SYTCg-lro14-h_nc7sbk13qkwAqFELLalwobxWn5_XdfJrCOAXtFHoxwpw0X7M8L8TqdWXVp8bQRO2NNWn3SjOeWyfgpRGThD51aihtct61AqEjerE_6h3R3qxpBNAt8-oa84aSba3qpzFy3porh1wpxoHbDv0cFqg_PqmVbxLkPY_fLb7yj9nxmHbfbT-6OCXo9JjTzp3eoHNd6wmwC9vbqqQj7aDqH18Z627cBKnJOxiVlGQZbhc7oHRpVf0nFBzyTkr6vWVGqoDH70RD1CnShRKN59wYgHJp_o0uGml4Eb_X4hVFpKzJZCRk8dKsKnT-0Rkg8axLVDr8IKCilKzhJxx6gcgCCyhUlF8Cg4DlSfI_l3w2xl_qSgahJWOgVayzbvs8gvKeTqrFfkQlEXclYABMInJdBZloZvWQbq90-KF9zULC-YD3R3Jhh_ne0u7v1iVSa8T03SAoQcmvwqUeq0xWh09Qdno4zuJL874f0ZWomwulZHXf9iUQa6BCh0BZlodDUMgJRI9LdKooNHUA_0-QVqJ2iB2rsUeOHyF08ntVyya6KW6--1rLc7j37IMGKVmtngblWrgfzbipEppGTnyojEkzY4vuB0wrMyLnVAXbbeF_k5yQ4Q0ev5_MZmi3XoDOA3TduVB7oWTlaemnU5&tga-with-creatives=1
IP
Hash c87b263aeff97ec6d79dacffa28440ad
5069f92881cc0ebf8d10e1c7f9c28a326cec2e1c
281d1dc888cf78f7507e73662f000daa59f04301ce8c5012d212f2e5d3b014a2
GET /ads/adfox/365825/getBulk/v2?dl=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&date=2023-02-08T23%3A28%3A22.734%2B00%3A00&pd=8&pdh=1024&pdw=1280&pr1=71298059&pr=2314821799&prr=&pv=23&pw=3&extid_loader=&extid_tag_loader=ritorika.com.ua&ylv=0.718954&ybv=0.718954&ytt=58275727015941&is-turbo=0&skip-token=&ad-session-id=1885451675898902718&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A250%2C%22width%22%3A300%2C%22height%22%3A250%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A474%2C%22top%22%3A631%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&enable-flat-highlight=1&pcode-version=718954&available-width=300&available-height=250&yaru=true&pp=bimw&ps=fijv&p2=hayo&partner-stat-id=164153541&slotNumber=1&bids=W10%3D&utf8=%E2%9C%93&pcode-test-ids=657518%2C0%2C13%3B685681%2C0%2C25%3B718868%2C0%2C81%3B716605%2C0%2C91%3B719185%2C0%2C86%3B717981%2C0%2C60%3B709000%2C0%2C42%3B718954%2C0%2C37%3B713622%2C0%2C71%3B716919%2C0%2C60&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUnZdYuCcFs38W4uizTpdlv033coyrYkO3STLVCkjuI5HM7lzBl9n5BpRRmWJeEcZzJDAskaMVRymVMmFyTDVJJKprRM6OTV2%2B%2BTL%2Burh83k1WTz9e%2FJi8n95vM9%2BQi%2F%2BrHl%2Bf7kx7sXkwXikuE%2FGsyFXJSoljmjpUQZH9gL1uA%2BQGCHTmS1ALhCSYFHh8OHnFREYPAvnfMZFXJJxIw2QiLwXXCTd4HvB5H7ZPBfgYyKQtaMZk0q%2BPExT4PGAPnEvPRAVF7gzCWkQhYowUULBSAJqirMzNkJXNcL%2B75UeCn5HKzhnwKkKMNM1gVajaDGDkW%2BE8d7h0hVoymWXJB0vpIZ4Qo8a6OWqNRmOX0NjxlOheS4KAbQ%2BHU9hA5t5wDd8KGXFarqxnzL2A4tbw8gZgyihRlTYcolb9gCryDkkMSpJFxWUCYLVJDsDKgT%2BNEeFGUq%2BitVtx2SoLpNup4xgoVW6EXhAawowENaFStZN0lBUolq0qYVUsIFdLYZzbYt3%2B41bUkXWNICbMkbvCcC1b4%2F76HtRp51KDihmwIzTmg1sAztILC9oW0UBfawWPe9QytwCHJ65vTYc8OjntmDFARICWph3KSsNNUsoPquJremIl2pt1Eu677d%2Fd3DpmfmOZEb61CoWuS87baRzfisnpHKIcaVpAnHUHqjtrpZv7%2FaDCzdwIn13XPyGii9kjNMpjMhK2E%2B0vPdWId9haoMv5askRktEamMlG%2BFjhvsz0sYnYOzcJacslFPjC3t0I%2BCkwcqChCMJEZzx7YC3aZvcOXIvAG2WJIMCJuUwCZGW8%2F2ujHT2naMIxPKVFIZykjDf%2FtJhBVSfmuHoReXaGWcFT6UZhfnLFfdxGtaQWEIUmLgg4GpY1nW0NazXH3nOqUZVuTBcWUcIL7nA0xXSopHGVa1uztPKvo0mnth6BybAxXCz6VqUKjO5yDsHADybAbZcq3T1gVGrJKlUioLxAga3dsZHOpbVhflmhHKiFjJZAUdj5c1ZeaABWHQ9d6uLrrRk3LjUPNhcES9ioThkCKYGzDA0hSyxA0s4ceub9sD27aK%2BV7f1DAzSDU1g3h%2Bx7opbSoBpSxWNZau2WuYJX4vPSVLIU6cJKSAqJmPi8PgUUvF1SlMo%2FmZ03cYZVMIolWIBILNCSgAoi6Ro9TczXHkhGHPjw5E0zsMVig2JUkSkFuqYwSjRXFGn1iO5%2BqqmzKUOObvQolah%2B%2B2Y7Nv4NuOZfr%2Bic63%2FUcsdsUxw%2B34YTjDHNS70T%2FbdwJtrYQQwzlwzgy02pSkZrvI7Qi21SisVB3EcLWbezXDiZniA%2BBoxx60EsxABnVdQTfNMORD0TZPmZpwnBuZKLBj2%2FMGYDMiWk96IBCPuaBmIDd0nIGkTutSljgjSAIIEmTRzmkzRuwOF5W0Tv83xkiQZDhH0BRPXBg83wqCQZh4iZiQoNoarMDPxdkPguCwxGn9O%2FJMy2GqFHWrfSUvzngV2mHXUKmS9bTqCgnliqZIDiIT6%2F3BXFFhFAfxXk3ljAAMCF9tr4RVbb7c0D6ZH3XrkUUQu13Z9SyeuhkHYexZ4R4FRlmmEIyCMwgirxPCvZN1kZnPchxLx7rXGEqO%2FVR3RIFnu7u2B1UDkhmuCkUjXcfSMqulda2YjrfGI7wwco9vIabmO0CaooPVgbW5rGEiwHAENb%2FA5XisTj59lve3Dx8uRxudFTnjvVUz54k8dlv%2FmeTAQtc1r24vWDBrKVg7Y85NvSCGBaVbj4ZH5wXVe5t29AxI1LXUYyBtpQ7Ds%2F0qr9df5eVme3F5%2FwgcqaCL5BwnKJEg6o1LkQXqYdDXmhqWMyi5XvWpLVlvug3MrHarB0mFgSWN7R7alteJE8akHl%2BiARWoaaMNdMtQzXR2dsn1dN8X6M2qZRrZaui%2B2ffJp839h8tyfXexvemm8PXt%2B%2B3Vhn9YX21vLiavnB8DVB%2BkR68INMeCpJZJoSpBbZr9A95Ortfbq5d3D%2BDbv%2Bubj5uv8Pn37fX6YvN58Ohifd0%2B%2Bfhtc6O%2Fvv6yvb%2FVH69f9n75eLPtnirkPQI8uFt%2Fu7r9dtn9%2Bdud%2Fv%2Fhbv3yZvPP56Mv%2FLm%2Bvd62pu9OX7HfvofUmtMX7Op8YKzqE51JPFjap4p7NxQVIOgIUBPFQHR2a7IE5kICT1fmU2IvcE%2B20KF0f%2FVBMFM7FmrVLYfNgtDDft9xSO8kxXWYqzcnZ16eRv6OM1HGs%2Fn4ZUH7YiU6etUSdct70Q5ivXSA0EsLBGeCCmfDUz%2FcX40SFVj%2BWQhgk2GArm5v%2F3oOztG2CMvtaZj%2B9FIS5qRWPrpNbEfH5inlaoGQ0ONzLOBjqhwT1ck9VL3bg6UDVj8xhA7jLjunoJekyBLgToKNbw96KKqQFjUihk16EBkrtqzDK7luOXqGpeoHBHw%2BU7VKSthJD9tV%2B7IQq6rusb0x4M%2FBNg%2BkAWDS5Dlg4bKGRioA8Wl37cxb0fPUWLXT5UQPxv74dad68uPdj%2F8ArziBww%3D%3D&use-server-side-rendering=1&pcode-icookie=Iigrgrqsqo2%2Bam12OBys2jFrLVovMk1AqeKLKyE%2FKPOiqZLQoe8QLWrCa1xgZOWimfwleAlSkxprxQbNR%2FT9inOk34Y%3D&top-ancestor=http%3A%2F%2Fritorika.com.ua&top-ancestor-undetermined=0&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1NDV9CkqjoJDkJoqAILDOKmzyj5tQQ779qKp_XbquX5d9W7_h8rXltjutW7WtiQPZrY6TqKH2IZNuuk8UMpGuG17XxV3KLXfd1p_A_gbqCWwLYyDGCCAzrymFTDe52XiMEGOEAQExxgixkAloBp_JcpnoTDbTYsBgGgy-y8BnWosecwGZDD5DwMB2mTx3EGTgL5Amk71gTJdpuAwYzQVz0aEuBz4DqnuOqAyoDOhME3zwgCMGXPCpC_4L2GJymaxFGVlYGFpqrCxPSMOWO6sy0RalsXBkQlpk8WYpq8ExMYb7csZj4BwpLbPAaOZRlqKCBYi9a4MEwOH-UJqCIKHSuEwwMo0ZYGuHDQwVavuwnHkv8AvcLMVxF1asmfsyzGLyesSf2bIK5qLFWqR4w8bMctjjLAB7EWsZM5hoLhPygj66jCBr0fOm0y748JmAbXjShfHSxlx2eafDsrC0YIIcrAMS6jAN6uHJZgBhAaF0i7EGxgxcPf2cRTnguGfJQvL6XsdneRDxAT_VjTpAwZgeDSVPA96wBwEVt3wA_2JeOnG7SHuaQ0nBW4k6cGp-uiaCD5_aXSprem_klUDEBx1QWv4g4oPmgk9FLCSSUVIR2woySiqhXCizKYGjnKNC2LCmQtgwo5CQwXLJZQqRCBBpCSUioSO0iQhlCqHtkNmkCgKZ0BXJpSQyuwB2BmF3AMvJHHCpqeGDm4EnlYiJFEJHJFRIyRRiMlcKx6GQSUgcErH8oEVyMptCIXbEchJioUtkSwngFlq4ItmChyuzSYW0lFRkcjh5YdhiBSGhLabtAdvijKJBLhpFRi214diOCBw5oSOTS8FxRcQS2I5EusuSE4hoKV0mqK8pM8durvukxzwqjGntNGNDNRVChb8-MSkJ3IKJSL7DTrCRKuB4KzuOWALbLTBECrnUJV66zu5EEgr5DjCDEiooZLbQlSlgSQiEDimBTOaQS6TC5W5_sMvMDtsNmfJmHQLvyKVSWxzAq1F7_DMTejSz0TDuxNEsUD7SFARy2TCz1CByyWwROELJzkfb2QHGqaUD3o6zDZB4CH10hQbhYagBhNzmxArRTBdJ6xOK5UQKMSxnCnI4wR3wHp8exievX0oIa-pBNj0bxIdXZm8RI5ClRA7h7SyaQYZAtkjL5FtclA8M3PWrFaxfmwgHyAICjA6y95ncCT8MbDWEgTgZsUxb9BGGzMRa3wej3fpkhR6ICQ6s8WUb8Sc8WlrEATPrP7Juij-gLVgtoiBPBBigItAICWR0-kUP0M5VtUg-uIrxbgDaIVRIbZlLN6Cr83AoSPQpL5OIbD2DnY2OUEIycTMmPAWBUCiRJiYURBQEYpKtTrnIUZAL5XBsj5vb6JafaBlKJaQQi6YmBqUHtIhcbNtSR9yrCG0gCSeqgv7a7ts8rmTP7xuygTSzjbD3RH5OPXZKqsfdILgNevoRPggPDp1YPpFILJSTL4Vi_ga8ZoAuuUR2117O_a5cCIuwHPj6diGByCEkoJDJRcSuzosT21KheF3tul4SySYqsIEVxtj1-eBl2NxrukfEORha4MKFEYM3adBZH_RMQSAklog3bBPZLulOZ3rYsIfnbjIryIjkUrlIKFYIJeLO5GpaTlShnCiNq6lLthRwa7g2GS0lAmDSLIDUCKipx3cQ2XSz0AuS07ZlsDvd7BTanRXhcl4AEFNTQvC92JFTD-NMUOI7c72Pthf44DDrg_Lmuv5G3f3sO9t_tHFy3h_q8oN5WE0ERV0moTFNZWL--Z479Tvwzepnns3-NlZ3c6x93EW7DmFQYOzyeOqfc9qy23LaRj9FF4bsWY5prb0P1lfYyuc1pwHW_Z_HOMU3GOFOYStTDbNvbA880IbrBqUZmrnjx9s5C9xIt1xzX6Y_AMrWJU7tPnS8r4c0kWRYob_Cznb6u6fik98yyjXxStF58fm9yjHdP7ihZG3zlvfeDDynqWxO62mmU1Pn_0sL86rxRU4Joe0QTEs-2jElF5RxJMyBj7K3HyPQcv8sZ0_emeLkNgyNBENFtWlP1mT73zganP4ZYa0cNUblBc5S7ZSMPXy8_8kzCxizLWY8902EmQqJgbsDbh81NIf5ZR6Hy3iroP8B7P-aQXxDQ-ke7CxEp_Z3uj21T36RqdpA0XkMXdsDK7BMbT0TRcGuG8zlM88bb-2_TQldytM8qk9K7L7QPvN9-NPAhivKop0afUyr8aX1FxADV9m-En2BnUyfnnwyIEd7LSObpqNNakPze92Oo11z3IqfaC7AAM2ZvO8kfAAVPNsNbWq7t3G6EHAno1K8PWtm5yB3tl4OHeEWcNTXG4-rVo5gGKfFTTh-lcmYSJa-1s5v0g6l2xIm3OsBd-c_BZJbXV24sn-rhk_DROleE8OnBCGaf6-oN2rAr6hRlsyNWrN6nnOPMwNAzzR7fz2GeNpKm4yu6IJ-rsMEdxaIs-FtAoPZKv-ncw8kxVo3-qyBg56a7dTPxKkMqccxCH1tHyF2976oOArhQNE_3BdeRQ0z02D588IoF-RvynUAy5kzoWei_9vAz-G1_7oRdHxYezRGfbhndxmGfr1KkFfecNYzg1Ef8Q6aP9Y89dTrTXRh3dQqi6vpao3nqbIfLI73XETPi6PsBq0xnQnmaPHSTRPg5PhpRpe9DD_pzAyn0y8pRcOADO3JH0Z-_u4BQOWCHrWNSBNeldCmnzIt1dE3sTqUA1n3-AKKx0Bxdoe6OcoysCfkDdVCnzFsQB9UatEilTLgyp9y_JJ4TXZcDQrKCUJWVapft0Z5OLMLeSmH1dH0rb61eMrPOu2IpiSwnqrcmFhhE1JyWUo31iVSA17okji9TzExw4dJ15H0zea-FdPxO_gp06frKBIzHDz9oNKtJKyjbsQX0cdvA8zTa3423nS2By6oKuL2s8xh3lJPlCPuZaCvntv6f6F-bB1sd4LG6cZRqs4o9OmtrMLq7O_ChfCA-WF4l97IyaaLNbrwHwSOOUJg3Dnww6z4X8rl7mrfaUakSlzlMS87YTGMv5_U7NY3h55vPm5-Br05GNck8u-PwmeHXp6A3cZgml4J99-ehQdk-pdtngbY9ywc9w9zgEGvxFH7sfXAvP9mBr26bQ9pYrfuc023h8de7xj0QdP-x77u_ift8IbyxvFemixlBzZI31zQ4TvlbynK8kqYN5_fNFfrbLNNPjMP7XDOTtJ3kcj7zMBTWG2ssl_Xs21HxqFr6OGUeqvCy9UnNUY7nj-ZXKTpB-DFhijba0FP__W8O008GwC1l5qpvbKwpien_GPqfVWbaOp_0hyXDmwECEarjLVDBpAOs273ttv0hPtpSuJTtdzQ50c6TB_kjdl4S2-QCR6QDipnTB7zf14qWTCCGgnMBuNMoJxSvE8Pu63eOLCKl4HV61vFUJILez-L75jM2fphvROdaw8dhURPAOUxsGfe8fJ0x4l1wgruhe_ljeHd1YdW-jUjMzaN-_u9Fjl94EqZpoEZ-voZXUyul97WwjqSmn-6Ym1T9tnv_azf2mD5tjr-RpUBL9x2h_h5MmFJZO7tdGYQqX6fsLPg2Jr9w1ltbKI7Myl9nA9Hh-1fDO-x8W6jssIbm7dx6yjzU4ZG9Xhw-jqc4LfhWn4IpWNyu2oYWQNZEafLmOtZQgX3OI8tK5qkdgUuZUEaaRBE5UFJPQr5mmEYzfIHBM_d7wplqzJ60bI0nqXGswbHRRwGHWvqCjC65REFlXDjnP3T2rbTmFs7X6N07uhuuUZ-Vj4ckTeZk9U4v4G_9GnNkd487fLnmzHvrU4BXbupP_eUJjqpWLQWdzpuUm-2NQV1ds7W7uzzrMufK0XgvFz2xkbfTo0_K2c2YeF3YAzIM-I3ypcBZc3e6A13WSgvAH0V5D5wkzfkdVdRTqmb82mwft23Jp1VUQnTixNZG8NLAasz9dbBFIPytzyg01iHxm4F2l19chhBHL43gOfzLnO14ySa9miFk8pU1-g7lBBVZ9BMOMF9jRkudUbeqpiRXXy6QbvW-Ko2U1Faz9kGn_U-ZK8VLz2dJZ3UXszneVdnEI6srB-vL6BXyRvRKJxo1SEb9_XqxXLLRRxqCL3JjSfBjOqg4W0iKg3zxLS-F6cQu8LGXFC0Mw1T2aGc4zOsC7CX7WH2XWBFCy3WajohKG2JcJ6_MKID44VZok7BLatcOAMTjHwvrX7kUJAadh3Kx0vVkL3AGnXKQvNot8GsMYM-Zd-NC-Vd_7Vxi610gJfAlsokCrJUsYDzb8Mosj64_ijt_wx9JuiPNCAjLxaHUALkycmnj6OiYoDaVedHqVnoFnLpHPXr--5WqQ877arwQt3cfW__K9T6G-4VeuNssO_b-FfRHi37RKCNfhyGPs6UxVyWeUbknoE1m0KZnaAP0n3SYTCg-lro14-h_nc7sbk13qkwAqFELLalwobxWn5_XdfJrCOAXtFHoxwpw0X7M8L8TqdWXVp8bQRO2NNWn3SjOeWyfgpRGThD51aihtct61AqEjerE_6h3R3qxpBNAt8-oa84aSba3qpzFy3porh1wpxoHbDv0cFqg_PqmVbxLkPY_fLb7yj9nxmHbfbT-6OCXo9JjTzp3eoHNd6wmwC9vbqqQj7aDqH18Z627cBKnJOxiVlGQZbhc7oHRpVf0nFBzyTkr6vWVGqoDH70RD1CnShRKN59wYgHJp_o0uGml4Eb_X4hVFpKzJZCRk8dKsKnT-0Rkg8axLVDr8IKCilKzhJxx6gcgCCyhUlF8Cg4DlSfI_l3w2xl_qSgahJWOgVayzbvs8gvKeTqrFfkQlEXclYABMInJdBZloZvWQbq90-KF9zULC-YD3R3Jhh_ne0u7v1iVSa8T03SAoQcmvwqUeq0xWh09Qdno4zuJL874f0ZWomwulZHXf9iUQa6BCh0BZlodDUMgJRI9LdKooNHUA_0-QVqJ2iB2rsUeOHyF08ntVyya6KW6--1rLc7j37IMGKVmtngblWrgfzbipEppGTnyojEkzY4vuB0wrMyLnVAXbbeF_k5yQ4Q0ev5_MZmi3XoDOA3TduVB7oWTlaemnU5&tga-with-creatives=1 HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: http://ritorika.com.ua
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1675898847199687-10226596215621049698-vla1-5334-vla-l7-balancer-8080-BAL-7284
last-modified: Wed, 08 Feb 2023 23:27:27 GMT
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
date: Wed, 08 Feb 2023 23:27:27 GMT
set-cookie: yandexuid=1210496981675898847; Path=/; Domain=.yandex.ru; Expires=Sat, 05-Feb-2033 23:27:27 GMT; SameSite=None; Secure
i=ugRfHkYiZ+1RhKvm3WZb3GSbZF8DFBJuZ/Ml/gDYk4VCV5Nyl+VtalwrOW0hlLwn5LrIRTrdqX0HEzSBBN0Yp9XzN7k=; Expires=Fri, 07-Feb-2025 23:27:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=6614399081675898847; Path=/; Domain=.yandex.ru; Expires=Thu, 08 Feb 2024 23:27:27 GMT; SameSite=None; Secure; HttpOnly
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
expires: Wed, 08 Feb 2023 23:27:27 GMT
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=29868&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29868&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29868&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
s.alfasrv.com/events/1x1.png?s=28760&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=28760&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=28760&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=28760&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=28760&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=28760&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:27 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
s.alfasrv.com/events/1x1.png?s=29867&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/2 s.alfasrv.com/events/1x1.png?s=29867&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /events/1x1.png?s=29867&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: s.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: image/png
content-length: 95
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer
access-control-allow-credentials: true
cache-control: no-cache,no-store
expires: Tue, 01 Jan 1980 1:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
v.alfasrv.com/stats/2x2.png?s=29867&a=fallback&k1=1&k2=1&e=i&t=p&c=0
200 OK 95 B URL HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=29867&a=fallback&k1=1&k2=1&e=i&t=p&c=0
IP
ASN #200350 Yandex.Cloud LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /stats/2x2.png?s=29867&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1
Host: v.alfasrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Wednesday, 08-Feb-2023 23:27:27 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Accept-Ranges: bytes
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903930
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903930
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898903930 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=612406edccc64f46ac3a5d170937684f; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
yastatic.net/s3/games-static/favicons/icon-192.png
200 OK 24 kB URL HTTP/2 yastatic.net/s3/games-static/favicons/icon-192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 7819c957eaa80af5bf14f760d49b64a7
93b670523acd14f884c3a538d59d408da0888a6c
ca78c114bba40b141a59c55a9d3fb6db7672bc3effd4337f2b1ce512b4d06c9e
GET /s3/games-static/favicons/icon-192.png HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: image/png
content-length: 24134
access-control-allow-origin: *
cache-control: public, max-age=216013
etag: "7819c957eaa80af5bf14f760d49b64a7"
expires: Sat, 11 Feb 2023 11:25:58 GMT
last-modified: Thu, 14 Apr 2022 12:22:42 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: a5ffe2a0d7bb2814
accept-ranges: bytes
X-Firefox-Spdy: h2
c.tmyzer.com/c/?s=88050&f=19&fi=0
200 OK 0 B URL HTTP/1.1 c.tmyzer.com/c/?s=88050&f=19&fi=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?s=88050&f=19&fi=0 HTTP/1.1
Host: c.tmyzer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
X-IPLB-Request-ID: 5B5A2A9A:3596_36264064:01BB_63E42FDC_5FD8694:29EFE
X-IPLB-Instance: 38431
cmp.quantcast.com/tcfv2/google-atp-list.json
200 OK 36 kB URL HTTP/2 cmp.quantcast.com/tcfv2/google-atp-list.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash d043b42907e0e734bf1e76a4608dd2fa
3ff8fc2494659ddb94e71a210e308b908ca1e859
14d8ae571a281372a78254c24223369cdced0af4724efbff87aaf7e74baf41e6
GET /tcfv2/google-atp-list.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Wed, 08 Feb 2023 17:34:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Wed, 08 Feb 2023 03:03:34 GMT
etag: W/"1dbfd79d4ea7f69c0c42a2f6065532e7"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EvPlxyEdzPOC-AtEWvvq1h8qXgMZgl-lawwG4QbCh7K8x5Z05b8e4Q==
age: 21203
X-Firefox-Spdy: h2
yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
200 OK 6.3 kB URL HTTP/2 yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23297)
Hash eb77de48712912aadc9aa8171ac75ede
f375e4ed6b585c4e30b2d56f4f41c3beed909349
437ee0c22002ccd77158d7a7018113f26384324158ab3cef65373007f29b1bcf
GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: text/html
content-length: 6262
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "eb77de48712912aadc9aa8171ac75ede"
expires: Sat, 08 Feb 2053 06:01:57 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=86&id=123876.702325.164153541.0.1.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898904
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=86&id=123876.702325.164153541.0.1.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898904
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=86&id=123876.702325.164153541.0.1.0&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898904 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904143
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904143
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904143 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=318606759b8b41e4971a099a5b4f3c2d; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904148
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904148
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904148 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=e2ea5ca71e2043b99829cc0a96011f87; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
www.acint.net/ping/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=21522363&dT=2023-02-08T23%3A28%3A24.140
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=21522363&dT=2023-02-08T23%3A28%3A24.140
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=21522363&dT=2023-02-08T23%3A28%3A24.140 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=21522363&dT=2023-02-08T23%3A28%3A24.140
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904196
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904196
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904196 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=2eba457a7b8a40a49899bfd5224ecd62; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
www.acint.net/ping/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=21522363&dT=2023-02-08T23%3A28%3A24.140
200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=21522363&dT=2023-02-08T23%3A28%3A24.140
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.5.1&uid=8e733673-0bf1-489e-80e7-9fd902cd40ac&dp=14&tz=%2B00%3A00&nc=21522363&dT=2023-02-08T23%3A28%3A24.140 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22site_id%22%3A123876%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A922772499%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22site_id%22%3A123876%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A922772499%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash c090d779606dfe4f39f9f9c0c256836e
53c14461f6b939c4037afd87afb9ae79f75d4b36
1574be25ca2371e4260bbf03dcaa97c69a19cf808c18caaa593cc9115c015461
GET /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22site_id%22%3A123876%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A922772499%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Wed, 08 Feb 2023 23:27:27 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/91568340/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263e43014-a5a1-ccej-4pws-ay9nxerp2206%22%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A160250142923%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A932732905%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/91568340/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263e43014-a5a1-ccej-4pws-ay9nxerp2206%22%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A160250142923%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A932732905%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 55f47d0dfcf243b64852f46e01211607
f7e2e1238eef35ea036ff110113d62ea8f09cec0
056cc07d9d3c975fa49a170b439f9b0819aa7ca8ebfd484ec12c62d4ba83efd2
GET /watch/91568340/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263e43014-a5a1-ccej-4pws-ay9nxerp2206%22%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A160250142923%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A932732905%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Wed, 08 Feb 2023 23:27:27 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/81608569/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A732765849%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/81608569/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A732765849%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 9392d5b7f4af539f477cb789931b4116
d760dcdc1fee37275c25d359130b428c845ecc3e
d77fa5a3064203f2dbf61c2525568db4811c750e5ce19dd9bb8f4c36b19ffca7
GET /watch/81608569/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A732765849%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Wed, 08 Feb 2023 23:27:27 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 961112d6d0aae9c0e45ae107a4246f28
56318ce83fa5bca9a78873d3044610d9933eeaf8
95a75be6ed01f187cd9147e803b85aef7b0ec3c19dc26ab5d157f833ffe2d3b3
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 12 Feb 2023 20:48:58 GMT
ETag: "56318ce83fa5bca9a78873d3044610d9933eeaf8"
Last-Modified: Wed, 08 Feb 2023 20:48:59 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3499
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796822d6fad5b511-OSL
ocsp.digicert.com/
200 OK 312 B IP
Hash 78b1865b36c3be64acae7774ec034746
08940a13d8b558061a5305a43275cb4a996a705e
74febfa16598aa888ef7ef00331921a4f092b2a8751025a2dae7e85ceecc6a3d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2811
Cache-Control: max-age=170771
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:27 GMT
Etag: "63e41cf7-138"
Expires: Fri, 10 Feb 2023 22:53:38 GMT
Last-Modified: Wed, 08 Feb 2023 22:06:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 78b1865b36c3be64acae7774ec034746
08940a13d8b558061a5305a43275cb4a996a705e
74febfa16598aa888ef7ef00331921a4f092b2a8751025a2dae7e85ceecc6a3d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2811
Cache-Control: max-age=170771
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:27 GMT
Etag: "63e41cf7-138"
Expires: Fri, 10 Feb 2023 22:53:38 GMT
Last-Modified: Wed, 08 Feb 2023 22:06:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 312
ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
200 Ok 95 B URL HTTP/1.1 ysa-static.passport.yandex.ru/static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 60cf42b4d05caf10cf8bb15c0817a7b4
bd269860bb508aebcb6f08fe7289d5f117830383
18c327afa903633f86c3efcf12b77f098077eacaa8be101bb007846fd74f8b93
GET /static/1/d959d7e39d5067fad30d9c06204866e9/d.png?ex=yes HTTP/1.1
Host: ysa-static.passport.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 Ok
Server: nginx/1.14.2
Date: Wed, 08 Feb 2023 23:27:27 GMT
Content-Type: image/png
Content-Length: 95
Connection: close
Cache-Control: private
Expires: Thu, 09 Feb 2023 23:27:27 GMT
X-RT-IQ: 0.0001
X-RT-IH: 0.0002
Strict-Transport-Security: max-age=315360000; includeSubDomains
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904348
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904348
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904348 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=d9298d4521e346f9b6db73d38bac0f23; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Origin.FromBundle~1&entry=c~Idfs.Rtus.147.Headers.Bundle~1&entry=c~Idfs.Rtus.147.Events.InitiateFetch~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1
200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Origin.FromBundle~1&entry=c~Idfs.Rtus.147.Headers.Bundle~1&entry=c~Idfs.Rtus.147.Events.InitiateFetch~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.147.Events.StartInit~1&entry=c~Idfs.Rtus.147.Origin.FromBundle~1&entry=c~Idfs.Rtus.147.Headers.Bundle~1&entry=c~Idfs.Rtus.147.Events.InitiateFetch~1&entry=c~Idfs.Rtus.147.Events.SyncframeDropped~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:27 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904362
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904362
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904362 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=266d002dafc845d49fc9bc03d75e310e; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904373
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904373
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904373 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=309ea42c83674c50a7d218b8fe32cc5f; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:26 GMT
content-length: 2
X-Firefox-Spdy: h2
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Headers.Bundle~1&entry=c~Idfs.Rtus.147.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.147.Headers.Bundle~1&entry=c~Idfs.Rtus.147.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.147.Headers.Bundle~1&entry=c~Idfs.Rtus.147.Events.InitiateFetch~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:27 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
mc.yandex.ru/watch/2174240?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A547976128%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-6-h-1)clc(0-0-0)aw(1)fip(1)ti(2)
302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/2174240?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A547976128%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-6-h-1)clc(0-0-0)aw(1)fip(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/2174240?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A547976128%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-6-h-1)clc(0-0-0)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/2174240/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A547976128%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-6-h-1%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: http://ritorika.com.ua
set-cookie: yabs-sid=899966801675898847; Path=/; SameSite=None; Secure
i=OXRnx4SwChYS+WyMgethIGjL64SZnIlc1oUtdOc/8vYxE+e9Jll9S9zDpzr9LLeo/jBdWzYR6wram86EAm9Uv6MIlQE=; Expires=Sat, 05-Feb-2033 23:27:22 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=335465241675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=335465241675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707434847.yc.1675898847#1707434847.yrts.1675898847#1707434847.yrtsi.1675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_1cec990b77e3db5b96c46b883ef980144382233a300071af8d202e8f2e8c71d5&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A262239816%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C4294%2C4294%2C8%2C%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/71281900/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_1cec990b77e3db5b96c46b883ef980144382233a300071af8d202e8f2e8c71d5&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A262239816%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C4294%2C4294%2C8%2C%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/71281900/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_1cec990b77e3db5b96c46b883ef980144382233a300071af8d202e8f2e8c71d5&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A262239816%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C4294%2C4294%2C8%2C%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/42093449?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A220807198%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-3)clc(0-0-0)aw(1)fip(1)ti(2)
302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/42093449?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A220807198%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-3)clc(0-0-0)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash a8dcda51eb8b50cadc138b9f7fe2fa96
2d161279a81e7b484abe5417ebe742d4accfa58b
b96d5de1bcc6fe6d3f112217822acfc674394cbd1d11272c8b0d6665aac4e20a
GET /watch/42093449?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A220807198%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-3)clc(0-0-0)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/42093449/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A220807198%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-3%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: http://ritorika.com.ua
set-cookie: yabs-sid=311962911675898847; Path=/; SameSite=None; Secure
i=0ljv9dxyziNdgsbCEUZYQNyIur17JPAITsu52QDrwCKSvRdYl/54j6Q2yL5W7N5WkFwpyZY0Ixv1lrNriq4JoCSgzjM=; Expires=Sat, 05-Feb-2033 23:27:11 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=605540581675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=605540581675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707434847.yc.1675898847#1707434847.yrts.1675898847#1707434847.yrtsi.1675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/81608569/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_ab7e10b60bb6e2cbc8a6b56d495226211da24a1cd21021ceef2c2401164fa03e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A382599037%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C4294%2C4294%2C8%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/81608569/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_ab7e10b60bb6e2cbc8a6b56d495226211da24a1cd21021ceef2c2401164fa03e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A382599037%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C4294%2C4294%2C8%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/81608569/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_ab7e10b60bb6e2cbc8a6b56d495226211da24a1cd21021ceef2c2401164fa03e&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A382599037%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C4294%2C4294%2C8%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/2174240/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A547976128%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-6-h-1%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
200 OK 236 B URL HTTP/2 mc.yandex.ru/watch/2174240/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A547976128%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-6-h-1%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5da5bd60718232d396e7b1fab6cbde74
5b97c5883baad4019eead6fda4c23ced31f62b5e
31491061dbd31406860f0a4154163d89f5be36322cc19446e09f3c6142d404ea
GET /watch/2174240/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898904%3Ac%3A1%3Arn%3A547976128%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-6-h-1%29clc%280-0-0%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 236
date: Wed, 08 Feb 2023 23:27:27 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A492696462%3Arqn%3A3%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(3)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A492696462%3Arqn%3A3%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(3)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A492696462%3Arqn%3A3%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(3)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4943
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:28 GMT
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:28 GMT
last-modified: Wed, 08-Feb-2023 23:27:28 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A110214958%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C4294%2C4294%2C8%2C1487%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(1)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A110214958%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C4294%2C4294%2C8%2C1487%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(1)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A110214958%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C4294%2C4294%2C8%2C1487%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(1)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:28 GMT
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:28 GMT
last-modified: Wed, 08-Feb-2023 23:27:28 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=147&r=2&j=criteoCallback
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=147&r=2&j=criteoCallback
IP
Hash 0fd56f6224863e065c37106075186e3b
a4ac89f38918945def264157f6ef1ce459bb94b2
06f0296228b0e05049d6801d076c53329d313d71f6d027abc84613e5bb0f6564
GET /sync?c=147&r=2&j=criteoCallback HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
x-crto-bundle: dvOV8l9MUmZWRiUyQndjTTNkZHFPZndxcGZSRyUyQjNKejRHd05tbURFZllpSVFITlJReDlEOXExSUVxSTllayUyQmpnTjFyQ2FZcHB1RktkcUlMY2k5NmglMkIxNVF5bjNJdkVpUnJhZTJKSnhqdExDMXFVVnkyYW1oYXhHWVhGcyUyQnEySGppWUtzaGg
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:27 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
server-processing-duration-in-ticks: 1464461
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/2174240/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A431513811%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C4294%2C4294%2C8%2C1487%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(1)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/2174240/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A431513811%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C4294%2C4294%2C8%2C1487%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(1)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/2174240/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A431513811%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C4294%2C4294%2C8%2C1487%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Ast%3A1675898904&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(1)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 80
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:28 GMT
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:28 GMT
last-modified: Wed, 08-Feb-2023 23:27:28 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 24d7ac94a767664e22a9f075979123cf
947e8a2ea94c52093a84376afd756d8d9a575b97
a97a87fdd6238263281ef896c442faf8223b99d6f45918fb97197b50207a6cac
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=166851
Date: Wed, 08 Feb 2023 23:27:28 GMT
Etag: "63e4052c-1d7"
Expires: Fri, 10 Feb 2023 21:48:19 GMT
Last-Modified: Wed, 08 Feb 2023 20:25:16 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BKwDoiE3M7hgMjW87kp8fH4QuRsAN-4F6vg6DmZZLZQFx54ylUhEcg==
Age: 4983
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904546
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904546
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904546 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=408275204c224def83f42fe1b38f7b76; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
mc.yandex.ru/watch/2174240?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A530250621%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
302 Found 2 B URL HTTP/2 mc.yandex.ru/watch/2174240?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A530250621%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /watch/2174240?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A530250621%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/2174240/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A530250621%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
date: Wed, 08 Feb 2023 23:27:28 GMT
access-control-allow-origin: http://ritorika.com.ua
set-cookie: yabs-sid=2045168251675898848; Path=/; SameSite=None; Secure
i=kgVfrOMqsAmHRP5r8mqzZBddavTxGf9syKQ6ODQVkkaDQVT3DqSsAE3eTqk8vKpdqGfO0wJxBKp4jF3yWCsGX7WBOeo=; Expires=Sat, 05-Feb-2033 23:27:03 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1065920051675898848; Expires=Thu, 08-Feb-2024 23:27:28 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1065920051675898848; Expires=Thu, 08-Feb-2024 23:27:28 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707434848.yc.1675898848#1707434848.yrts.1675898848#1707434848.yrtsi.1675898848; Expires=Thu, 08-Feb-2024 23:27:28 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:28 GMT
last-modified: Wed, 08-Feb-2023 23:27:28 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904559
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904559
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904559 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 2
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c2fe6172e4a840e589f12bedf8b7c050; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
X-Firefox-Spdy: h2
cdn.adfinity.pro/foralls/adfinity_1.1.css
200 OK 2.4 kB URL HTTP/2 cdn.adfinity.pro/foralls/adfinity_1.1.css
IP
ASN #210756 G-Core Rus LLC
Hash 25287c2ff594269015838986c9b693bd
4be22d590b01719c31a4c2ced6243a3a3c69dbea
f9e87abdfa89379dc71662340707ba64d057c6b48fb66357092a7a3126ddf8d8
GET /foralls/adfinity_1.1.css HTTP/1.1
Host: cdn.adfinity.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: text/css
last-modified: Wed, 23 Nov 2022 12:04:05 GMT
etag: W/"637e0c35-1fc2"
cache: HIT
x-cached-since: 2023-02-08T23:23:45+00:00
x-id: m9-up-gc89
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 72390cb7ac945efb0f941ea683debf03
d1a37f015b7e7cdf2d259aa62a15e2f784833571
974d7cfa45510239991f637da24cb599d0ba4f4d538d52bff44aca7cde437558
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 377
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Last-Modified: Wed, 08 Feb 2023 23:21:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 313
adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
200 OK 20 B URL HTTP/1.1 adtrack.adleadevent.com/notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /notifyme.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 HTTP/1.1
Host: adtrack.adleadevent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://ritorika.com.ua
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Wed, 08 Feb 2023 23:27:28 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Last-Modified: Wed, 08 Feb 2023 23:27:28 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Length: 20
Connection: keep-alive
ocsp.digicert.com/
200 OK 313 B IP
Hash 72390cb7ac945efb0f941ea683debf03
d1a37f015b7e7cdf2d259aa62a15e2f784833571
974d7cfa45510239991f637da24cb599d0ba4f4d538d52bff44aca7cde437558
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6248
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Last-Modified: Wed, 08 Feb 2023 21:43:20 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 72390cb7ac945efb0f941ea683debf03
d1a37f015b7e7cdf2d259aa62a15e2f784833571
974d7cfa45510239991f637da24cb599d0ba4f4d538d52bff44aca7cde437558
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 393
Cache-Control: max-age=108239
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Etag: "63e33226-139"
Expires: Fri, 10 Feb 2023 05:31:27 GMT
Last-Modified: Wed, 08 Feb 2023 05:24:54 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 72390cb7ac945efb0f941ea683debf03
d1a37f015b7e7cdf2d259aa62a15e2f784833571
974d7cfa45510239991f637da24cb599d0ba4f4d538d52bff44aca7cde437558
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 377
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Last-Modified: Wed, 08 Feb 2023 23:21:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 313
mc.yandex.ru/watch/2174240/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A530250621%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/2174240/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A530250621%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/2174240/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&cnt-class=1&hittoken=1675898847_c2566bbf757bf1554211d50b46e8464bc51811568c80afac68646a1ac3f1200c&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A5%3Adp%3A0%3Als%3A1066447240959%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A530250621%3Arqn%3A2%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%282%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:28 GMT
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:28 GMT
last-modified: Wed, 08-Feb-2023 23:27:28 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22718954%22%3A%7B%22remoteLogString%22%3A%7B%22Error%22%3A%7B%7D%7D%7D%7D&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A863181608%3Arqn%3A4%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%284%29aw%281%29fip%281%29ti%282%29
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22718954%22%3A%7B%22remoteLogString%22%3A%7B%22Error%22%3A%7B%7D%7D%7D%7D&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A863181608%3Arqn%3A4%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%284%29aw%281%29fip%281%29ti%282%29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22718954%22%3A%7B%22remoteLogString%22%3A%7B%22Error%22%3A%7B%7D%7D%7D%7D&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A863181608%3Arqn%3A4%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%284%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 08 Feb 2023 23:27:28 GMT
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:28 GMT
last-modified: Wed, 08-Feb-2023 23:27:28 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cmp.quantcast.com/GVL-v2/purposes-RU.json
200 OK 7.8 kB URL HTTP/2 cmp.quantcast.com/GVL-v2/purposes-RU.json
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 8ca1b265f013ad69f958555aa56e97b9
ecf830b3900efc380f7d13d5add6e1adcf81a76a
0593e3d64674b28be0cdf11cc6ec171565258dd50d6ea185d9ec375bf5031e8c
GET /GVL-v2/purposes-RU.json HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Wed, 08 Feb 2023 03:00:39 GMT
last-modified: Wed, 08 Feb 2023 03:00:34 GMT
etag: W/"ebde40b3af9b725bb9bcd82a2bdab403"
x-amz-server-side-encryption: AES256
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8_RVo3yuIVOCC3l7S6Oa3PCFqe_OLC93M9C-0SSFQAtndquUIE3ZLA==
age: 73609
X-Firefox-Spdy: h2
ww1097.smartadserver.com/genericpost
204 No Content 0 B URL HTTP/1.1 ww1097.smartadserver.com/genericpost
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /genericpost HTTP/1.1
Host: ww1097.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,POST
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
ww1097.smartadserver.com/genericpost
204 No Content 0 B URL HTTP/1.1 ww1097.smartadserver.com/genericpost
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /genericpost HTTP/1.1
Host: ww1097.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ritorika.com.ua/
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,POST
access-control-allow-origin: http://ritorika.com.ua
vary: Origin
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904741
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904741
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904741 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=3c973367597c42a69b7c5a30c4dc02b8; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904740
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904740
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904740 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 2
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=f9696ed804664a8da63b4f30906d4bc8; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904764
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904764
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904764 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=ed966989912749279a8410c6326debc5; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ww1097.smartadserver.com/genericpost
200 OK 276 B URL HTTP/1.1 ww1097.smartadserver.com/genericpost
IP
File type ASCII text, with very long lines (561), with no line terminators
Hash 60ad3b2bd6c24876e775778aa5350ab1
c980fbc3282037421dcf292c05188768b3b17405
2d0d19d184748abe7b0eb904bba969458e422d5bbe65c461ec31e85d40455fc4
POST /genericpost HTTP/1.1
Host: ww1097.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/javascript
Content-Length: 949
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100%3b%24sw%3d1280%3b%24sh%3d1024; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
vs=528741=5315007; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
pid=2219476409924992779; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638114956482411608&o=1; expires=Thu, 09 Feb 2023 23:27:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Thu, 09 Feb 2023 23:27:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ww1097.smartadserver.com/genericpost
200 OK 287 B URL HTTP/1.1 ww1097.smartadserver.com/genericpost
IP
File type ASCII text, with very long lines (595), with no line terminators
Hash f7fcfb63aba6f192c80627f2a45967c9
3f55ed3e99b56fc7f7ee98bac763bf6042961e35
03d9d836b864153e62c0f880dc62af87eb5c4bffff3132398c8234d2a2998ce3
POST /genericpost HTTP/1.1
Host: ww1097.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/javascript
Content-Length: 955
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100%3b%24sw%3d1280%3b%24sh%3d1024; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
vs=528741=5315007; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
pid=8399685940845494139; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638114956482423833&o=1; expires=Thu, 09 Feb 2023 23:27:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Thu, 09 Feb 2023 23:27:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ads.themoneytizer.com/passback/moneytizer/300x250.png
200 OK 18 kB URL HTTP/2 ads.themoneytizer.com/passback/moneytizer/300x250.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash 2074ad598cbe9af526b502fc7fd7bc48
da9079311db777d1b7be769e74ff9e4445dcdcc7
f2deef450997edbab9c5766cd19c5a92fab6ad60764cff1e8661f12c87b4e186
GET /passback/moneytizer/300x250.png HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:28 GMT
content-type: image/png
content-length: 18013
last-modified: Tue, 10 Jan 2023 10:35:12 GMT
expires: Thu, 09 Feb 2023 16:04:35 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-accel-expires: @1675958675
server: CDN77-Turbo
x-77-nzt: AblMCRS55x3/zWcAAA
x-77-nzt-ray: af585630a068ba6ce02fe463ab68101a
x-cache: HIT
x-age: 26573
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.themoneytizer.com/media/tm.png
200 OK 228 B URL HTTP/2 ads.themoneytizer.com/media/tm.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 19 x 15, 8-bit colormap, non-interlaced\012- data
Hash 27a694e3fa0ab9153f0fa8d274f4bc5c
fde476fa9c8dd1b5c8b49883bbd9e71cb649052d
fb98a2a03c925aa211a860ca87a7f33a100fe74f37915c16b16ce7c0a1247223
GET /media/tm.png HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:28 GMT
content-type: image/png
content-length: 228
last-modified: Mon, 07 Nov 2022 09:00:04 GMT
expires: Thu, 09 Feb 2023 16:04:31 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-accel-expires: @1675958671
server: CDN77-Turbo
x-77-nzt: AblMCRSV553/0WcAAA
x-77-nzt-ray: af585630a068ba6ce02fe4630b38551e
x-cache: HIT
x-age: 26577
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904949
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904949
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904949 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=93b6647ca01444f4a45976f4b2368ade; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904950
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904950
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898904950 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=fe88b2eeec934216bbd40d3498a751e3; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ww1097.smartadserver.com/genericpost
200 OK 3.9 kB URL HTTP/1.1 ww1097.smartadserver.com/genericpost
IP
File type HTML document, ASCII text, with very long lines (3525), with CRLF, LF line terminators
Hash 555155aaf667c86ba0626df2091b9fba
0a5c722acc5acab7a68d063e983518494735a583
21a91913b3f6861606a4c7d220f5d625e6e5703eca8ad37a2cbfc2614f4a8f49
POST /genericpost HTTP/1.1
Host: ww1097.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/javascript
Content-Length: 1045
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d12999%3b%24o%3d11100%3b%24sw%3d1280%3b%24sh%3d1024; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
vs=528741=5315007; domain=.smartadserver.com; path=/
TestIfCookie=ok; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
pid=7855454885124259621; expires=Thu, 08 Feb 2024 23:27:28 GMT; domain=.smartadserver.com; path=/
sasd2=q=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0&c=1&l=819242284&lo=988266927<=638114956482354501&o=1; expires=Thu, 09 Feb 2023 23:27:28 GMT; domain=.smartadserver.com; path=/
sasd=%24qc%3D1311348260%3B%24ql%3DMedium%3B%24qpc%3D1006%3B%24qt%3D216_1430_41056t%3B%24dma%3D0; expires=Thu, 09 Feb 2023 23:27:28 GMT; domain=.smartadserver.com; path=/
transfer-encoding: chunked
vary: Accept-Encoding, Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
x-smrt-i: 9251363
ads.themoneytizer.com/lib_watermark.js
200 OK 1.4 kB URL HTTP/2 ads.themoneytizer.com/lib_watermark.js
IP
ASN #60068 Datacamp Limited
Hash 29af28c3da290cb83430261291da44e7
d61e4c87228e8321751fe6ce87a8c2967fcf91c8
85c868d6ec3c9ddbd185cecf198e68d03e530700237a42eb6d33ea6126cb9b8f
GET /lib_watermark.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:28 GMT
content-type: application/javascript
last-modified: Fri, 20 Jan 2023 16:37:11 GMT
expires: Thu, 09 Feb 2023 16:04:32 GMT
cache-control: max-age=86400, public, no-transform
pragma: public
x-accel-expires: @1675958672
server: CDN77-Turbo
x-77-nzt: AblMCRTWNhD/0GcAAA
x-77-nzt-ray: af585630a068ba6ce02fe463710c161a
x-cache: HIT
x-age: 26576
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/xbfe_backfill.js
200 OK 3.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/xbfe_backfill.js
IP
File type ASCII text, with very long lines (1531)
Hash 562506238b9215a693454fbc88d0df5a
165f27696f81a017b433ba8d1d0f8c7cdc677041
b906b51be2742b7cfc21fe2d99515aa1aa51a2af3a1b1b4335792138bde40486
GET /pagead/xbfe_backfill.js HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 3003
x-xss-protection: 0
date: Wed, 08 Feb 2023 22:43:33 GMT
expires: Wed, 08 Feb 2023 23:43:33 GMT
cache-control: public, max-age=3600
age: 2635
etag: 2660866305706646737
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/render_post_ads_v1.html
200 OK 4.8 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/render_post_ads_v1.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12776)
Hash 66e246fbebeda1d07f167e9645d4ccd3
1838db0a0b475246a392dce0d14d7a8b26979ff3
64d762859670ae33f3045deed975c7843e04dada5f0dc9be61da03887803ceb7
GET /pagead/render_post_ads_v1.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4767
x-xss-protection: 0
date: Wed, 08 Feb 2023 22:01:53 GMT
expires: Thu, 09 Feb 2023 22:01:53 GMT
cache-control: public, max-age=86400
age: 5135
etag: 12223946614886178233
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ams3-ib.adnxs.com/rd_log?an_audit=0&referrer=https%3A%2F%2Fritorika.com.ua%2Fbez-rubriki%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&e=wqT_3QKcBHwcAgAAAwDWAAUBCN7fkJ8GEOXNtZiM1PnLMhgAKjYJAA0BABENCAQAGQkJCNA_IQkJCAAAKREJ9GkBMQAAAOBRuJ4_MKjI9Qw4lRxAlRxIAFAAWJq2oQFgAGiM-E546fEFgAEBigEAkgEDVVNEmAGsAqAB-gGoAQGwAQC4AQDAAQDIAQDQAQDYAQDgAQDwAQDYAvJD4AKa_yzqAlNodHRwczovL3JpdG9yaWthLmNvbS51YS9iZXotcnVicmlraS9jaHRvLXpuYWNoaXQtcmF6ZGFldHNqYS12LXRvcnJlbnRlLWktY2h0by1kZWxhdIADAIgDAZADAJgDF6ADAaoDAMADrALIAwDYAwDgAwDoAwD4AwGABACSBA0vdXQvdjMvcHJlYmlkmAQAogQMOTEuOTAuNDIuMTU0qAQAsgQQCAAQARisAiD6ASgAMAA4ArgEAMAEAMgEANoEAggA4AQA8AQAiAUBmAUAoAUAwAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAPAFAPoFBAgAEACQBgCYBgC4BgDBBgAAAAAhchDaBhYKEAEJLgEAcBAAGADgBgDyBgIIAIAHAYgHAKAHAMgH6fEF0gcNNc0BJgzaBwYIBQlo4AcA6gcCCADwB_z2C4oIAhAAlQgAAIA_mAgB&s=dc6b29907160a54c04a18e62c267ef94958707a3&bdref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&bdtop=true&bdifs=1&bstk=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat,http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/rd_log?an_audit=0&referrer=https%3A%2F%2Fritorika.com.ua%2Fbez-rubriki%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&e=wqT_3QKcBHwcAgAAAwDWAAUBCN7fkJ8GEOXNtZiM1PnLMhgAKjYJAA0BABENCAQAGQkJCNA_IQkJCAAAKREJ9GkBMQAAAOBRuJ4_MKjI9Qw4lRxAlRxIAFAAWJq2oQFgAGiM-E546fEFgAEBigEAkgEDVVNEmAGsAqAB-gGoAQGwAQC4AQDAAQDIAQDQAQDYAQDgAQDwAQDYAvJD4AKa_yzqAlNodHRwczovL3JpdG9yaWthLmNvbS51YS9iZXotcnVicmlraS9jaHRvLXpuYWNoaXQtcmF6ZGFldHNqYS12LXRvcnJlbnRlLWktY2h0by1kZWxhdIADAIgDAZADAJgDF6ADAaoDAMADrALIAwDYAwDgAwDoAwD4AwGABACSBA0vdXQvdjMvcHJlYmlkmAQAogQMOTEuOTAuNDIuMTU0qAQAsgQQCAAQARisAiD6ASgAMAA4ArgEAMAEAMgEANoEAggA4AQA8AQAiAUBmAUAoAUAwAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAPAFAPoFBAgAEACQBgCYBgC4BgDBBgAAAAAhchDaBhYKEAEJLgEAcBAAGADgBgDyBgIIAIAHAYgHAKAHAMgH6fEF0gcNNc0BJgzaBwYIBQlo4AcA6gcCCADwB_z2C4oIAhAAlQgAAIA_mAgB&s=dc6b29907160a54c04a18e62c267ef94958707a3&bdref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&bdtop=true&bdifs=1&bstk=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat,http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fritorika.com.ua%2Fbez-rubriki%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&e=wqT_3QKcBHwcAgAAAwDWAAUBCN7fkJ8GEOXNtZiM1PnLMhgAKjYJAA0BABENCAQAGQkJCNA_IQkJCAAAKREJ9GkBMQAAAOBRuJ4_MKjI9Qw4lRxAlRxIAFAAWJq2oQFgAGiM-E546fEFgAEBigEAkgEDVVNEmAGsAqAB-gGoAQGwAQC4AQDAAQDIAQDQAQDYAQDgAQDwAQDYAvJD4AKa_yzqAlNodHRwczovL3JpdG9yaWthLmNvbS51YS9iZXotcnVicmlraS9jaHRvLXpuYWNoaXQtcmF6ZGFldHNqYS12LXRvcnJlbnRlLWktY2h0by1kZWxhdIADAIgDAZADAJgDF6ADAaoDAMADrALIAwDYAwDgAwDoAwD4AwGABACSBA0vdXQvdjMvcHJlYmlkmAQAogQMOTEuOTAuNDIuMTU0qAQAsgQQCAAQARisAiD6ASgAMAA4ArgEAMAEAMgEANoEAggA4AQA8AQAiAUBmAUAoAUAwAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAPAFAPoFBAgAEACQBgCYBgC4BgDBBgAAAAAhchDaBhYKEAEJLgEAcBAAGADgBgDyBgIIAIAHAYgHAKAHAMgH6fEF0gcNNc0BJgzaBwYIBQlo4AcA6gcCCADwB_z2C4oIAhAAlQgAAIA_mAgB&s=dc6b29907160a54c04a18e62c267ef94958707a3&bdref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&bdtop=true&bdifs=1&bstk=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat,http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat& HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 23:27:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 6a4254f9-7930-4ed8-893a-633e29901e00
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 953.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905161
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905161
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905161 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=1849e988e2c3465298b00c1ac6354e64; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905159
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905159
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905159 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=2a5a6f5155384aeab8d1a31cb91412d1; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905169
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905169
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905169 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=b93565bbc00c4d8096e2e9118eb43d41; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
cdn.adnxs.com/v/s/231/trk.js
200 OK 28 kB URL HTTP/1.1 cdn.adnxs.com/v/s/231/trk.js
IP
File type ASCII text, with very long lines (3174)
Hash 3f3e5176c70a15daa549a047730ce9e1
bffa3987be4f3336bf4079759c4059143364f215
01748b20204714ba2887166c4eac83bac26bd6e0f01c455014a2419e5277b1ca
GET /v/s/231/trk.js HTTP/1.1
Host: cdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 27455
Content-Type: application/x-javascript
ETag: "48b9fe7fe4120aea6f95a30f505d7b35:1669802845.0694"
Last-Modified: Wed, 30 Nov 2022 10:07:25 GMT
Server: AkamaiNetStorage
Content-Encoding: gzip
Cache-Control: max-age=31536000
Expires: Wed, 10 Jan 2024 21:27:38 GMT
Access-Control-Allow-Origin: *
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Wed, 08 Feb 2023 23:27:28 GMT
Age: 2512790
X-Served-By: cache-lga13620-LGA, cache-bma1674-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 7, 3163231
X-Timer: S1675898849.760425,VS0,VE0
Vary: Accept-Encoding
ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fritorika.com.ua%252Fbez-rubriki%252Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&e=wqT_3QKqBugqAwAAAwDWAAUBCN7fkJ8GEP-duN373aG_DhgAKjYJfv0QGyycpD8RIc0WGMtXoj8ZAAAAYI_CxT8hIQ0SACkRJNAxAAAAQOF6lD8wrMj1DDiVHEDlHkhlUKuiyyVYmrahAWAAaIz4Tnjp8QWAAQGKAQNVU0SSAQEG9KUCmAGsAqAB2ASoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQDYAvJD4AKa_yzqAlNodHRwczovL3JpdG9yaWthLmNvbS51YS9iZXotcnVicmlraS9jaHRvLXpuYWNoaXQtcmF6ZGFldHNqYS12LXRvcnJlbnRlLWktY2h0by1kZWxhdIADAIgDAZADAJgDF6ADAaoD5wEKvwFodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL3BhZ2VhZC9nZW5fMjA0P2lkPWF3YmlkJmF3YmlkX2I9QUtBbWYtQUpNYXQxSGJhYWNIbHhNWDc2NXlRUE5OQ09OSk9sbnFnWGI1Y1MtNVJRdzNQU2dKNnAyODJNaVBQS1FWallJTDlpSHJqODlWWkxfVjdlYUR4ZGltRFU3LVowVGcmcHI9MTA6JHtBVUNUSU9OX1BSSUNFfRoTMTA0NDQyMDUyNzgwMDU4NTk4MyIINzg4Mjc4MTkqBDM5NDHAA6wCyAMA2AMA4AMA6AMA-AMBgAQAkgQNL3V0L3YzL3ByZWJpZJgEAKIEDDkxLjkwLjQyLjE1NKgEALIEEAgAEAEYrAIg2AQoADAAOAK4BADABADIBADaBAIIAeAEAfAEq6LLJYgFAZgFAKAFgv-H_pKuq5oSwAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAfAFqjj6BQQIABAAkAYAmAYAuAYAwQYAAAAAAADwP9AG7o8B2gYWChAAAAAAAAAAAAAAAAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcBqgcMMTQ4MTI2OTM4Njc0yAfp8QXSBw0JAAAAAAAAAAAQABgA2gcGCAAQABgA4AcA6gcCCADwB_z2C4oIAhAAlQgAAIA_mAgB&s=5511591bb5e889eb6e60b55db6af9104ed3a417e
200 OK 0 B URL HTTP/1.1 ams3-ib.adnxs.com/it?an_audit=0&referrer=https%253A%252F%252Fritorika.com.ua%252Fbez-rubriki%252Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&e=wqT_3QKqBugqAwAAAwDWAAUBCN7fkJ8GEP-duN373aG_DhgAKjYJfv0QGyycpD8RIc0WGMtXoj8ZAAAAYI_CxT8hIQ0SACkRJNAxAAAAQOF6lD8wrMj1DDiVHEDlHkhlUKuiyyVYmrahAWAAaIz4Tnjp8QWAAQGKAQNVU0SSAQEG9KUCmAGsAqAB2ASoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQDYAvJD4AKa_yzqAlNodHRwczovL3JpdG9yaWthLmNvbS51YS9iZXotcnVicmlraS9jaHRvLXpuYWNoaXQtcmF6ZGFldHNqYS12LXRvcnJlbnRlLWktY2h0by1kZWxhdIADAIgDAZADAJgDF6ADAaoD5wEKvwFodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL3BhZ2VhZC9nZW5fMjA0P2lkPWF3YmlkJmF3YmlkX2I9QUtBbWYtQUpNYXQxSGJhYWNIbHhNWDc2NXlRUE5OQ09OSk9sbnFnWGI1Y1MtNVJRdzNQU2dKNnAyODJNaVBQS1FWallJTDlpSHJqODlWWkxfVjdlYUR4ZGltRFU3LVowVGcmcHI9MTA6JHtBVUNUSU9OX1BSSUNFfRoTMTA0NDQyMDUyNzgwMDU4NTk4MyIINzg4Mjc4MTkqBDM5NDHAA6wCyAMA2AMA4AMA6AMA-AMBgAQAkgQNL3V0L3YzL3ByZWJpZJgEAKIEDDkxLjkwLjQyLjE1NKgEALIEEAgAEAEYrAIg2AQoADAAOAK4BADABADIBADaBAIIAeAEAfAEq6LLJYgFAZgFAKAFgv-H_pKuq5oSwAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAfAFqjj6BQQIABAAkAYAmAYAuAYAwQYAAAAAAADwP9AG7o8B2gYWChAAAAAAAAAAAAAAAAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcBqgcMMTQ4MTI2OTM4Njc0yAfp8QXSBw0JAAAAAAAAAAAQABgA2gcGCAAQABgA4AcA6gcCCADwB_z2C4oIAhAAlQgAAIA_mAgB&s=5511591bb5e889eb6e60b55db6af9104ed3a417e
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /it?an_audit=0&referrer=https%253A%252F%252Fritorika.com.ua%252Fbez-rubriki%252Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&e=wqT_3QKqBugqAwAAAwDWAAUBCN7fkJ8GEP-duN373aG_DhgAKjYJfv0QGyycpD8RIc0WGMtXoj8ZAAAAYI_CxT8hIQ0SACkRJNAxAAAAQOF6lD8wrMj1DDiVHEDlHkhlUKuiyyVYmrahAWAAaIz4Tnjp8QWAAQGKAQNVU0SSAQEG9KUCmAGsAqAB2ASoAQGwAQC4AQHAAQXIAQLQAQDYAQDgAQDwAQDYAvJD4AKa_yzqAlNodHRwczovL3JpdG9yaWthLmNvbS51YS9iZXotcnVicmlraS9jaHRvLXpuYWNoaXQtcmF6ZGFldHNqYS12LXRvcnJlbnRlLWktY2h0by1kZWxhdIADAIgDAZADAJgDF6ADAaoD5wEKvwFodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL3BhZ2VhZC9nZW5fMjA0P2lkPWF3YmlkJmF3YmlkX2I9QUtBbWYtQUpNYXQxSGJhYWNIbHhNWDc2NXlRUE5OQ09OSk9sbnFnWGI1Y1MtNVJRdzNQU2dKNnAyODJNaVBQS1FWallJTDlpSHJqODlWWkxfVjdlYUR4ZGltRFU3LVowVGcmcHI9MTA6JHtBVUNUSU9OX1BSSUNFfRoTMTA0NDQyMDUyNzgwMDU4NTk4MyIINzg4Mjc4MTkqBDM5NDHAA6wCyAMA2AMA4AMA6AMA-AMBgAQAkgQNL3V0L3YzL3ByZWJpZJgEAKIEDDkxLjkwLjQyLjE1NKgEALIEEAgAEAEYrAIg2AQoADAAOAK4BADABADIBADaBAIIAeAEAfAEq6LLJYgFAZgFAKAFgv-H_pKuq5oSwAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAfAFqjj6BQQIABAAkAYAmAYAuAYAwQYAAAAAAADwP9AG7o8B2gYWChAAAAAAAAAAAAAAAAAAAAAAEAAYAOAGAfIGAggAgAcBiAcAoAcBqgcMMTQ4MTI2OTM4Njc0yAfp8QXSBw0JAAAAAAAAAAAQABgA2gcGCAAQABgA4AcA6gcCCADwB_z2C4oIAhAAlQgAAIA_mAgB&s=5511591bb5e889eb6e60b55db6af9104ed3a417e HTTP/1.1
Host: ams3-ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 23:27:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 59238d9c-3f84-465b-96de-1b4861b52ca1
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 953.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-CVMcUopuvX1CdjfPY_4xN9PQGLn8NL8OgraQmhog0dhbkH7ccxutpIpJKoVB1qZ363KW-HKJNOfWe2k0DNxnsajHNYzA
204 No Content 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/gen_204?id=awbid&awbid_b=AKAmf-CVMcUopuvX1CdjfPY_4xN9PQGLn8NL8OgraQmhog0dhbkH7ccxutpIpJKoVB1qZ363KW-HKJNOfWe2k0DNxnsajHNYzA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=awbid&awbid_b=AKAmf-CVMcUopuvX1CdjfPY_4xN9PQGLn8NL8OgraQmhog0dhbkH7ccxutpIpJKoVB1qZ363KW-HKJNOfWe2k0DNxnsajHNYzA HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ced-ns.sascdn.com/diff/templates/ts/dist/video-read/sas-video-read-4.2.js
200 OK 20 kB URL HTTP/1.1 ced-ns.sascdn.com/diff/templates/ts/dist/video-read/sas-video-read-4.2.js
IP
ASN #20940 Akamai International B.V.
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash c3573e504cc819eea48954ff986a1a5c
30ee5b625ee3cfa4b7cac174b45cbc3f8eb8133e
8c7c8ebee85076fc1c1d425ba66c0c6073aedfd9b57014004437b4b476c0fb3e
GET /diff/templates/ts/dist/video-read/sas-video-read-4.2.js HTTP/1.1
Host: ced-ns.sascdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "01fd3bddfe4dd3fb644b20ba87d598d0:1634717910.062222"
Last-Modified: Wed, 20 Oct 2021 08:07:22 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=86400
Date: Wed, 08 Feb 2023 23:27:28 GMT
Content-Length: 20181
Connection: keep-alive
googleads.g.doubleclick.net/pagead/adfetch
200 OK 32 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/adfetch
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash e4e92641a1218ad3ae37b395c00b5035
465de53894b0d8da23f1d2885c1dfac555771785
1c72ee961dbb1f5b4ad525cb44c94b82245216526e8e63bc025d01f8a45dbf20
POST /pagead/adfetch HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2232
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/render_post_ads_v1.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Wed, 08 Feb 2023 23:27:28 GMT
server: cafe
content-length: 32466
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905335
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905335
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905335 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=8642ec1d7e6b4d3daa3cc502905dd803; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9c5a278f07b138c1503ea3f0ec3797e
d36fe8427bd7ba735b06e69469ef715d1600da4e
978b6a189d73e308e1d79ac9241b2e1d07c43bc9ec65e2f4112ed74f143e342b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905351
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905351
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905351 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=e384fbd807b345de84202eaa6a6d3f7a; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905352
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905352
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7413&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905352 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=9f975cff040b4530b8406564862f1331; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:27 GMT
content-length: 2
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a9c5a278f07b138c1503ea3f0ec3797e
d36fe8427bd7ba735b06e69469ef715d1600da4e
978b6a189d73e308e1d79ac9241b2e1d07c43bc9ec65e2f4112ed74f143e342b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230207/r20110914/abg_lite.js
200 OK 11 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230207/r20110914/abg_lite.js
IP
File type ASCII text, with very long lines (1484)
Hash 1aa24af66c2ed4abbc30772ab3be0b20
d4dbf32ec81a3bd61e407c294a33e6cc6abdc6e1
05ee66c0854f02d7bc0219550294848234b98fd717a77ceeadaed3e9df6a6fc8
GET /pagead/js/r20230207/r20110914/abg_lite.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 10959
x-xss-protection: 0
date: Wed, 08 Feb 2023 18:23:18 GMT
expires: Wed, 22 Feb 2023 18:23:18 GMT
cache-control: public, max-age=1209600
age: 18250
etag: 8014804816029865715
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20230207/r20110914/client/qs_click_protection.js
200 OK 10 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230207/r20110914/client/qs_click_protection.js
IP
File type ASCII text, with very long lines (1512)
Hash 488757c82a3750931a88ed3a195a0002
19e9a97516021b85edfb7dd6bc2848cf28b3e846
d57077b876b126584706a1e1f8d0edcf38c2979bc9dfe148633d08dfff028470
GET /pagead/js/r20230207/r20110914/client/qs_click_protection.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 10373
x-xss-protection: 0
date: Wed, 08 Feb 2023 18:23:18 GMT
expires: Wed, 22 Feb 2023 18:23:18 GMT
cache-control: public, max-age=1209600
age: 18250
etag: 8500822718963992128
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ced-ns.sascdn.com/diff/templates/js/parser/prod/vast-parser.js?v=20200303
200 OK 27 kB URL HTTP/1.1 ced-ns.sascdn.com/diff/templates/js/parser/prod/vast-parser.js?v=20200303
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65496)
Hash 99dca6e832978ca049134a671da27c15
06aa70f8669c82d6a5054533e1788c95e4d3d6a1
b64f6a5663fa094378459adfe0b7ac1504bf993b5abb7e3faa734f0185b1adad
GET /diff/templates/js/parser/prod/vast-parser.js?v=20200303 HTTP/1.1
Host: ced-ns.sascdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ritorika.com.ua/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "600c96cffb46d8560887c3d644846463:1634717814.119338"
Last-Modified: Wed, 20 Oct 2021 08:07:22 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=86400
Date: Wed, 08 Feb 2023 23:27:28 GMT
Content-Length: 27017
Connection: keep-alive
tpc.googlesyndication.com/simgad/703263755792043756?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qm4hgHuF5CpxA1RqX1GVK40p-RSWQ
200 OK 122 kB URL HTTP/2 tpc.googlesyndication.com/simgad/703263755792043756?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qm4hgHuF5CpxA1RqX1GVK40p-RSWQ
IP
File type PNG image data, 300 x 600, 8-bit colormap, non-interlaced\012- data
Size 122 kB (121966 bytes)
Hash f00329602911bacf72e9daf05b02f24e
81de15ec4ff0831d412075129883d53fc52ad0ba
f9cc8dcc2ec6cb3448022a88686401da19d2fddae99f7b109a66c4dfab4a76ba
GET /simgad/703263755792043756?sqp=4sqPyQQ7QjkqNxABHQAAtEIgASgBMAk4A0DwkwlYAWBfcAKAAQGIAQGdAQAAgD-oAQGwAYCt4gS4AV_FAS2ynT4&rs=AOga4qm4hgHuF5CpxA1RqX1GVK40p-RSWQ HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 121966
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 12:25:27 GMT
expires: Wed, 07 Feb 2024 12:25:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 07:37:23 GMT
content-type: image/png
age: 126121
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20230207/r20110914/client/one_click_handler_one_afma.js
200 OK 18 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230207/r20110914/client/one_click_handler_one_afma.js
IP
File type ASCII text, with very long lines (1823)
Hash 5c2ccbfe65083e0cb109b6dc94fc2ef7
8640b1ba47932c8e914d08b93b894b43d36e7562
a7b9f5755be9c222ac074a8738fdf0aae68727d15cc5f2f86e5bc29f4836a49a
GET /pagead/js/r20230207/r20110914/client/one_click_handler_one_afma.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 18148
x-xss-protection: 0
date: Wed, 08 Feb 2023 18:23:18 GMT
expires: Wed, 22 Feb 2023 18:23:18 GMT
cache-control: public, max-age=1209600
age: 18250
etag: 12905786629727798809
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20230207/r20110914/client/window_focus.js
200 OK 1.3 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230207/r20110914/client/window_focus.js
IP
File type ASCII text, with very long lines (1500)
Hash c6be4595650bfa6cbb0839f2fab25529
0ab58af5d6c029935919c889d75455a15f5429a3
bb2b1f1b24360f9d28e6e5e0bcffa6f19111b176cdbd849340673f224a73e92b
GET /pagead/js/r20230207/r20110914/client/window_focus.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1305
x-xss-protection: 0
date: Wed, 08 Feb 2023 18:23:18 GMT
expires: Wed, 22 Feb 2023 18:23:18 GMT
cache-control: public, max-age=1209600
age: 18250
etag: 12828169674928258300
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ww1097.smartadserver.com/track/action?sid=56079&pid=1645928&iid=9251363&cid=24965660&key=noad&vit=4&vct=2&vrn=4&ts=1104
200 OK 43 B URL HTTP/1.1 ww1097.smartadserver.com/track/action?sid=56079&pid=1645928&iid=9251363&cid=24965660&key=noad&vit=4&vct=2&vrn=4&ts=1104
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /track/action?sid=56079&pid=1645928&iid=9251363&cid=24965660&key=noad&vit=4&vct=2&vrn=4&ts=1104 HTTP/1.1
Host: ww1097.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Wed, 08 Feb 2023 23:27:28 GMT
transfer-encoding: chunked
ww1097.smartadserver.com/track/action?sid=56079&pid=1645928&iid=9251363&cid=24965660&key=viewerror&vit=4&vct=2&vrn=4&ts=1104
200 OK 43 B URL HTTP/1.1 ww1097.smartadserver.com/track/action?sid=56079&pid=1645928&iid=9251363&cid=24965660&key=viewerror&vit=4&vct=2&vrn=4&ts=1104
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /track/action?sid=56079&pid=1645928&iid=9251363&cid=24965660&key=viewerror&vit=4&vct=2&vrn=4&ts=1104 HTTP/1.1
Host: ww1097.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Wed, 08 Feb 2023 23:27:28 GMT
transfer-encoding: chunked
ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905606
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905606
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7908&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905606 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=9752eb373baa461783fe5542e0c06148; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:28 GMT
content-length: 2
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905609
200 OK 2 B URL HTTP/2 ads.adlook.me/vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905609
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=7548&w=789&h=444&mult=1&rw=0&ref=&loc=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&top=&_ts=1675898905609 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=f22dd6674f164c3293f5c5a708c57721; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
date: Wed, 08 Feb 2023 23:27:28 GMT
content-length: 2
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 08 Feb 2023 23:27:29 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cf49eabf6c39227090fe9c84259813a3
af588e3b99547bf1b73111ad7021194470040614
5fbee01dfdae355f394e11104227264533acc86778df34f37715d37c601a9721
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cf49eabf6c39227090fe9c84259813a3
af588e3b99547bf1b73111ad7021194470040614
5fbee01dfdae355f394e11104227264533acc86778df34f37715d37c601a9721
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.adfinity.pro/foralls/adfinity_1.1.js
200 OK 18 kB URL HTTP/2 cdn.adfinity.pro/foralls/adfinity_1.1.js
IP
ASN #210756 G-Core Rus LLC
Hash 49b87f52d45b123fc27c784b6c139831
627ce72ec7a9d27da2b9fe7110205923b85e4ce5
fc5f69f8c79bec316b9b91488c297589c300cff1cc8be90374fa60c07ed01147
GET /foralls/adfinity_1.1.js HTTP/1.1
Host: cdn.adfinity.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
last-modified: Tue, 07 Feb 2023 06:31:58 GMT
etag: W/"63e1f05e-10a21"
cache: HIT
x-cached-since: 2023-02-08T23:23:25+00:00
x-id: m9-up-gc90
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/rtb-b/js/876/2/123876.js
200 OK 46 kB URL HTTP/2 cdn-rtb.sape.ru/rtb-b/js/876/2/123876.js
IP
Hash edca99fc355e95319a46d5d162b92651
afb2cc068806fcb2308125b875f3092e06af5959
371d9e508ebd9496b1457890d806e133d4e179c219c48365466d03f3ddbfc78f
GET /rtb-b/js/876/2/123876.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: block-all-mixed-content
etag: W/"0676988a7e140a85486778249517b663"
last-modified: Wed, 08 Feb 2023 22:40:10 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 1741FA9045351036
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Thu, 09 Feb 2023 00:27:24 GMT
cache-control: max-age=3600
x-cache-status: REVALIDATED
X-Firefox-Spdy: h2
yastatic.net/q/set/s/rsya-tag-users/bundle.js
200 OK 37 kB URL HTTP/2 yastatic.net/q/set/s/rsya-tag-users/bundle.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 91e64ec3ff1b06e9f037f6f3e66b9ca2
986457f9bc67e5b7da7afcf2fc173eca8229a43b
c3ff618152ae2fc4ccda4a3440aa1eff73e974b6fef5e2393c85c9a684ec6b3d
GET /q/set/s/rsya-tag-users/bundle.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.9
date: Wed, 08 Feb 2023 23:27:29 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=31556952
content-encoding: br
etag: W/"82bdc8db563d3e71c35534315f8a9fd5"
expires: Sat, 11 Feb 2023 11:25:56 GMT
last-modified: Fri, 29 Oct 2021 11:19:01 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: 31b41cf26c5ae292
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0
302 Found 42 B URL HTTP/2 www.googleadservices.com/pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/conversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&ocp_id=4S_kY5KdK9KNygX4nZDYDA&random=1633639115&sscte=1&crd=
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.googleadservices.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 74ace29e686ae4445710506fba552bd5
f09b4d13010f36b8f3efb0442b3d6e616e26a643
f655be0a03ae5bb0d71fae713a55c95462e40c688c2154221ba8c95d94917ff1
GET /pagead/conversion_async.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 08 Feb 2023 23:27:29 GMT
expires: Wed, 08 Feb 2023 23:27:29 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 10376002428160754156
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15164
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7980999daf055fc9e21ce2d8663483ab
3e584c1676ed7789a50dc5c9391653a0b96a9bab
44143d9428bae54918244e95d8f31dfea0865929c0a0805c0f328a2a7eb78fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fritorika.com.ua%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1122458033372%3Ahid%3A909138688%3Az%3A0%3Ai%3A20230208232826%3Aet%3A1675898906%3Arn%3A789902757%3Arqn%3A1%3Au%3A1675898906918006836%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C14%2C0%2C%2C0%2C%2C56%2C1%2C310%2C310%2C0%2C79%3Aco%3A0%3Ans%3A1675898904118%3Ast%3A1675898906&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29
200 OK 236 B URL HTTP/2 mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fritorika.com.ua%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1122458033372%3Ahid%3A909138688%3Az%3A0%3Ai%3A20230208232826%3Aet%3A1675898906%3Arn%3A789902757%3Arqn%3A1%3Au%3A1675898906918006836%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C14%2C0%2C%2C0%2C%2C56%2C1%2C310%2C310%2C0%2C79%3Aco%3A0%3Ans%3A1675898904118%3Ast%3A1675898906&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ecefdad858bc4e579e5657d158be2140
b1497f1230977725481ee13aec7f3a6f15f562ce
498d681cf4f9fcec103a7aed92628333d576c8f6e4ba2bd0198851e9d135ed9f
GET /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fritorika.com.ua%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1122458033372%3Ahid%3A909138688%3Az%3A0%3Ai%3A20230208232826%3Aet%3A1675898906%3Arn%3A789902757%3Arqn%3A1%3Au%3A1675898906918006836%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C14%2C0%2C%2C0%2C%2C56%2C1%2C310%2C310%2C0%2C79%3Aco%3A0%3Ans%3A1675898904118%3Ast%3A1675898906&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 236
date: Wed, 08 Feb 2023 23:27:29 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://yastatic.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:29 GMT
last-modified: Wed, 08-Feb-2023 23:27:29 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.alfasense.net/js/layout_676.js
200 OK 5.2 kB URL HTTP/2 cdn.alfasense.net/js/layout_676.js
IP
ASN #52000 Innovation IT Solutions LTD
Hash 986244c65df0150b2c6c7f654ef3233a
86f50402f640bb110c9ee3db1b9652a51a20aefa
acafdfec5524182f385ecc8370d90bb83c22c0fc27e2de6f61a7a13c3e817c9f
GET /js/layout_676.js HTTP/1.1
Host: cdn.alfasense.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
last-modified: Wed, 08 Feb 2023 04:49:12 GMT
etag: W/"63e329c8-109a0"
content-security-policy: frame-ancestors 'none';frame-src 'self';
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
permissions-policy: geolocation=(self), payment=(self)
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block;
cache-control: public, max-age=60
content-encoding: gzip
set-cookie: route=dd92c318b574e2af8018c0207c5098f9; Path=/
SRVGROUP=common; path=/; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/693627671/?random=1675898906242&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=3979076671&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/693627671/?random=1675898906242&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=3979076671&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/693627671/?random=1675898906242&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=3979076671&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1633639115&crd=&is_vtc=1&random=414573495&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1633639115&crd=&is_vtc=1&random=414573495&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1014923426/?label=eA9lCJXGrmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=1633639115&crd=&is_vtc=1&random=414573495&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/693627671/?random=1675898906234&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=388848271&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/693627671/?random=1675898906234&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=388848271&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/693627671/?random=1675898906234&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=388848271&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1675898906239&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=3511299830&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1675898906239&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=3511299830&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1675898906239&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=3511299830&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=352000964&crd=&is_vtc=1&random=1798743960&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=352000964&crd=&is_vtc=1&random=1798743960&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1014923426/?label=uXlUCLqxpmMQooH64wM&value=0&script=0&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&random=352000964&crd=&is_vtc=1&random=1798743960&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yastatic.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/947884341/?random=1675898906231&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=2010693630&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/947884341/?random=1675898906231&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=2010693630&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/947884341/?random=1675898906231&cv=9&fst=1675897200000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=extensions%3D%3BfromGoogle%3Dfalse%3BfromCancel%3Dfalse%3Bloyal%3D0%3Bsbscrb%3D%3Bp%3D%3Bb%3D%3Bfresh%3D%3Binfected%3D%3Bslow%3D%3Bos%3Dwindows%3Bbrowser%3Dfirefox%3Bwinxp%3Dfalse%3Bold%3Dactual&frm=2&url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&ref=http%3A%2F%2Fritorika.com.ua%2F&async=1&fmt=3&is_vtc=1&random=2010693630&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 23:27:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 72226fa2f9513f894889fa652cb2a8bf
8a1b4f108db687c34b334a94e6d931544fd7508e
a70034db82d42d5deb58f551cb4de47a5cf6b226dbc9aa98892adb62c2f73289
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
onetag-sys.com/usync/?cb=1675898903823
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?cb=1675898903823
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?cb=1675898903823 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
acdn.adnxs.com/dmp/async_usersync.html
200 OK 17 kB URL HTTP/1.1 acdn.adnxs.com/dmp/async_usersync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52990)
Hash 9c6b5ce6b3452e98573e6409c34dd73c
de607fadef62e36945a409a838eb8fc36d819b42
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
GET /dmp/async_usersync.html HTTP/1.1
Host: acdn.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT
ETag: "623de86a-cf34"
Unused62: 8096267
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Length: 17053
Cache-Control: max-age=86402
Expires: Thu, 09 Feb 2023 23:27:32 GMT
Date: Wed, 08 Feb 2023 23:27:30 GMT
Connection: keep-alive
Vary: Accept-Encoding
eb2.3lift.com/sync?
200 OK 37 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /sync? HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:30 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 7e6a75dd05170b1ded5904ae57ac7b13
743f7147ff40043b2452d46a3a6bc192dfb82026
2d62b378cf6ab735b3be017ccfac33b12afe98dc83bba0e60f56d173a9547edc
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 23:27:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 Feb 2023 21:45:49 GMT
Expires: Thu, 09 Feb 2023 21:45:49 GMT
ETag: "743f7147ff40043b2452d46a3a6bc192dfb82026"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ads.stickyadstv.com/user-matching?id=3602&gdpr=0&gdpr_consent=
302 Moved Temporarily 0 B URL HTTP/1.1 ads.stickyadstv.com/user-matching?id=3602&gdpr=0&gdpr_consent=
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-matching?id=3602&gdpr=0&gdpr_consent= HTTP/1.1
Host: ads.stickyadstv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Length: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
x-sticky-vk: 1675898850732041-357
Location: https://csync.smilewanted.com/set_partner_userid_get/freewheel/9bcbbe64944410b9ec7752ac546eb84?gdpr_consent=&gdpr=0
Expires: Wed, 08 Feb 2023 23:27:30 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 08 Feb 2023 23:27:30 GMT
Connection: keep-alive
Set-Cookie: UID=9bcbbe64944410b9ec7752ac546eb84; Domain=ads.stickyadstv.com; Expires=Fri, 10-Mar-2023 23:27:30 GMT; Path=/
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0d370f8d9239374cd2f765340e2e67c8
5fb8bca1d2934da69871d3c006d78d54daea052d
d269ec25d619da1dd10a65e160936701d8bf86796018bfc0432f02017f12eebc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 23:27:30 GMT
Last-Modified: Wed, 08 Feb 2023 22:13:32 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZmWBUIjVC8T4LKP0-UqpARN71NpyG2tbyF7VBYYcSnV479wbPtrsUA==
Age: 4438
static.smilewanted.com/js/decode_consent/decode_consent.js
200 OK 12 kB URL HTTP/2 static.smilewanted.com/js/decode_consent/decode_consent.js
IP
File type ASCII text, with very long lines (49614), with no line terminators
Hash ba2e74d61ff6e7bd77873b0e63210c75
ba06e5bd7ec42df76ce1da6f96a3527bfea18147
24c92f3f71a895388cf1112fffc5ae6b706543b61c83ec07f48bfb349971cfd6
GET /js/decode_consent/decode_consent.js HTTP/1.1
Host: static.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:30 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 17:11:55 GMT
etag: W/"607873db-c1ce"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 632471
vary: Accept-Encoding
server: cloudflare
cf-ray: 796822e7c88fb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 860de467316d92b1ed7e2fa684422280
a04742424d1b362f567a9731fbaae9c3f3517b23
83b765f874d89506346b7c2f5106c3a9983644d97f4fe315fa68d3a45733b7f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3214
Cache-Control: max-age=99546
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:30 GMT
Etag: "63e3052e-1d7"
Expires: Fri, 10 Feb 2023 03:06:36 GMT
Last-Modified: Wed, 08 Feb 2023 02:13:02 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
csync.smilewanted.com/drop_cookie_sw.php
200 OK 25 B URL HTTP/2 csync.smilewanted.com/drop_cookie_sw.php
IP
Hash 363f411ba212d4d1ccf7856f856145e9
08331057577f273187dd15e7c6f57937835e0aff
c50b40612adfdbf2e228758746fc7927cf440cb9bb5a8280c00d7946632a1943
GET /drop_cookie_sw.php HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw822et3AB9FnSxQj2hd8waLUUlXpVg1HepnV47NPTX8MXN%2F0uP5zPYtdnCRViiRox6wETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6vpk9dHVhJCXGDpHlmsrCRw%3D%3D; expires=Fri, 09-Feb-2024 05:16:42 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822e88936b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=48d37e37f0663ec58e856e701d974d50
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=48d37e37f0663ec58e856e701d974d50
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=48d37e37f0663ec58e856e701d974d50 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 23:27:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 2b2b33d7-c7b2-4979-b13c-9473f97931e8
Set-Cookie: anj=dTM7k!M4.FE:2jUF']wIg2E>4x5)4L!]tbP6j2F-.aE@%O4WYq=BWSoeVr@)kODItgkn'*l!m7wdYP0jlv^ZdigL.jj6QxBw@e+O/X+GY1Qw1nn^EUv; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 23:27:30 GMT; Domain=.adnxs.com; Secure; HttpOnly
uids=eyJ0ZW1wVUlEcyI6eyJzbWlsZXdhbnRlZCI6eyJ1aWQiOiI0OGQzN2UzN2YwNjYzZWM1OGU4NTZlNzAxZDk3NGQ1MCIsImV4cGlyZXMiOiIyMDIzLTA1LTA5VDIzOjI3OjMwWiJ9fSwiYmlydGhkYXkiOiIyMDIzLTAyLTA4VDIzOjI3OjMwWiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 23:27:30 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 279 B IP
Hash ac9899f40dee898db6a2dc365db45270
e41bc4f872b32e30d8447b4af74111d3fea415fa
c0d38ad28df13133c0a8858e260d2e4697232feb8ec83632196f02d7aacfa6f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2573
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:30 GMT
Last-Modified: Wed, 08 Feb 2023 22:44:37 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
creativecdn.com/cm-notify?pi=smilewanted
302 Found 0 B URL HTTP/2 creativecdn.com/cm-notify?pi=smilewanted
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm-notify?pi=smilewanted HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 23:27:30 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: u=Y5jZDUaTfC9dyWd4Gxlq;Path=/;Domain=.creativecdn.com;Expires=Thu, 08-Feb-2024 23:27:30 GMT;Max-Age=31536000;Secure;SameSite=None
ts=1675898850;Path=/;Domain=.creativecdn.com;Expires=Thu, 08-Feb-2024 23:27:30 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/cm-notify?pi=smilewanted&tc=1
content-length: 0
X-Firefox-Spdy: h2
creativecdn.com/cm-notify?pi=smilewanted&tc=1
200 OK 42 B URL HTTP/2 creativecdn.com/cm-notify?pi=smilewanted&tc=1
IP
ASN #204995 Rtb House S.A.
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cm-notify?pi=smilewanted&tc=1 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:30 GMT
content-type: image/gif
content-length: 42
X-Firefox-Spdy: h2
csync.smilewanted.com/set_partner_userid_get/freewheel/9bcbbe64944410b9ec7752ac546eb84?gdpr_consent=&gdpr=0
200 OK 954 B URL HTTP/2 csync.smilewanted.com/set_partner_userid_get/freewheel/9bcbbe64944410b9ec7752ac546eb84?gdpr_consent=&gdpr=0
IP
Hash da88de96bf894c181d2a1e9c8b488055
1daff2ac253d550a09a5a00407b209d0915da5ed
303e40476feee83cd5333321cf726317cd0c77f000d5e1bff0625a9dd87ae9cb
GET /set_partner_userid_get/freewheel/9bcbbe64944410b9ec7752ac546eb84?gdpr_consent=&gdpr=0 HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw822et3AB9FnSxQj2hd8waLUUlXpVg1HepnV47NPTX8MXN%2F0uP5zPYtdnCRViiRox6wETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6vpk9dHVhJCXGDpHlmsrCRw%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: sw_user_params_infos=U9xMaWXDNMsKjwBFvjZ13jF0ETd0VAOUdeMgfRDDPHIgfFdLmswmErRwfVQVnvR%2BBgkEVmJVe5NSlF7QSv0ZwsMk2m2S3nUpLJ9h63MzamxRNIu9oFSIVcJJtaZWLziB8j7CQ5kJ5TpVY13iIFMtXwB8wby2DMcHIfspcxCotRLkS%2F5JD6s7qJYC3%2BAbLGNUFn6rpCRmnnbYFl3ZrkZk0g%3D%3D; expires=Fri, 09-Feb-2024 05:16:42 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822e9daaeb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
sync-eu.connectad.io/syncer/1?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
204 No Content 0 B URL HTTP/2 sync-eu.connectad.io/syncer/1?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncer/1?gdpr_consent=&cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fconnectad%2F HTTP/1.1
Host: sync-eu.connectad.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.connectad.io/
Cookie: cadsync
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 Feb 2023 23:27:31 GMT
set-cookie: id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.connectad.io; secure; SameSite=None
uid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.connectad.io; secure; SameSite=None
cache-control: no-cache, private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822eabb6cb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ice.360yield.com/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010
302 Found 0 B URL HTTP/2 ice.360yield.com/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/{PUB_USER_ID}&partner_id=1010 HTTP/1.1
Host: ice.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Wed, 08 Feb 2023 23:27:31 GMT
content-type: text/plain
content-length: 0
location: https://ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
set-cookie: tuuid=390a897e-a9a4-4241-a790-54bf16ccc634; Expires=Tue, 09 May 2023 23:27:31 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1675898851; Expires=Tue, 09 May 2023 23:27:31 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
200 OK 43 B URL HTTP/2 ice.360yield.com/ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/server_match?r=https://csync.smilewanted.com/set_partner_userid_get/improve/%7BPUB_USER_ID%7D&partner_id=1010 HTTP/1.1
Host: ice.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:31 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 96e7bb12f08331c5da3771c820b0ad34
7bbbe5d5d561b61fdcbbed196704ba531423305c
81a6c29a94e0c776091ca9dfab43a9e6fb60dba2f13ddd8d0f1981b1913a9c38
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 23:27:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 08 Feb 2023 21:11:51 GMT
Expires: Thu, 09 Feb 2023 21:11:51 GMT
ETag: "7bbbe5d5d561b61fdcbbed196704ba531423305c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 471 B IP
Hash 9ce0c9bc2a6db0953de294199054df32
349a4f1fa3240e2b9d0a2254453ecaa4d78113e5
992aaf5ee320fb9291ced258e2b6fa49170bf1b5d54ee6b74955cf32719ebd93
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3272
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 23:27:31 GMT
Last-Modified: Wed, 08 Feb 2023 22:32:59 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]
302 Found 0 B URL HTTP/2 sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid] HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
date: Wed, 08 Feb 2023 23:27:30 GMT
cache-control: no-cache,no-store
location: https://sync.smartadserver.com:443/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
pragma: no-cache
set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/
TestIfCookieP=ok; expires=Thu, 08 Feb 2024 23:27:31 GMT; domain=.smartadserver.com; path=/
pbw=%24b%3d12999%3b%24o%3d11100; expires=Thu, 08 Feb 2024 23:27:31 GMT; domain=.smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
X-Firefox-Spdy: h2
pixel.rubiconproject.com/exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent=
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /exchange/sync.php?p=pbs-smilewanted&gdpr=0&gdpr_consent= HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 66ef90d06496cfd000aab8206f2b6221
Content-Type: image/gif
sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
200 OK 0 B URL HTTP/2 sync.smartadserver.com/getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1
IP
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?gdpr_consent=&nwid=2491&url=https://csync.smilewanted.com/set_partner_userid_get/smart/[sas_uid]&cklb=1 HTTP/1.1
Host: sync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://csync.smilewanted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Wed, 08 Feb 2023 23:27:30 GMT
X-Firefox-Spdy: h2
us.ck-ie.com/smw888.gif?gdpr=0&gdpr_consent=&us_privacy={$USPrivacy}&coppa={$COPPA}&puid={$PARTNER_UID}
204 No Content 0 B URL HTTP/1.1 us.ck-ie.com/smw888.gif?gdpr=0&gdpr_consent=&us_privacy={$USPrivacy}&coppa={$COPPA}&puid={$PARTNER_UID}
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smw888.gif?gdpr=0&gdpr_consent=&us_privacy={$USPrivacy}&coppa={$COPPA}&puid={$PARTNER_UID} HTTP/1.1
Host: us.ck-ie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 08 Feb 2023 23:27:31 GMT
Content-Type: text/plain
Connection: keep-alive
www.acint.net/rtbw/1?dp=16&cd=%7B%22st%22%3A123876%2C%22sc%22%3A164153549%2C%22pl%22%3A702326%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A6%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898909
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=16&cd=%7B%22st%22%3A123876%2C%22sc%22%3A164153549%2C%22pl%22%3A702326%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A6%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898909
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=16&cd=%7B%22st%22%3A123876%2C%22sc%22%3A164153549%2C%22pl%22%3A702326%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A6%7D&sid=63e43014-a5a1-ccej-4pws-ay9nxerp2206&ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&r=1675898909 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21; cSyncDp7v2=1675898844; cSyncDp14v3=1675898844; cSyncDp17=1675898844; cSyncDp32=1675898844; cSyncDp45v3=1675898844; cSyncDp53v2=1675898844; cSyncDp62=1675898844; cSyncDp67v2=1675898844; cSyncDp68=1675898844; cSyncDp71=1675898844; cSyncDp85=1675898844; cSyncDp95v3=1675898844; cSyncDp98v2=1675898844; cSyncDp101=1675898844; cSyncDp104v2=1675898844; cSyncDp107=1675898844; cSyncDp110=1675898844; cSyncDp125v3=1675898844; cSyncDp126=1675898844; cSyncDp127=1675898844; cSyncDp129=1675898844; cSyncDp136v2=1675898844; cSyncDp146=1675898844; cSyncDp148v1=1675898844; cSyncDp149v2=1675898844; cSyncDp151=1675898844; cSyncDp178=1675898844; cSyncDp186=1675898844; cSyncDp221=1675898844; cSyncDp235=1675898844
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:32 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
prebid.smilewanted.com/
403 Forbidden 0 B IP
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 376
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 796822d0fa58b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
yandex.ru/ads/system/context.js
200 OK 0 B URL HTTP/2 yandex.ru/ads/system/context.js
IP
GET /ads/system/context.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=jQp0r9XbhUFeJzj2kTiZ3yrfU9FMu19GX0paMr0ygzALH/6Qe6w7aB1laKX8xZq3PlzqHxtwCtgp0JoHro2zzUGfleQ=; Expires=Fri, 07-Feb-2025 23:27:26 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=9738643651675898846; Path=/; Domain=.yandex.ru; Expires=Thu, 08 Feb 2024 23:27:26 GMT; SameSite=None; Secure; HttpOnly
expires: Thu, 09 Feb 2023 00:27:26 GMT
x-yandex-req-id: 1675898846009578-7642574230065140326-vla1-5334-vla-l7-balancer-8080-BAL-4077
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
prebid.smilewanted.com/
403 Forbidden 0 B IP
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 377
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 796822d12a89b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/42/cmp2ui-ru.js
200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/42/cmp2ui-ru.js
IP
GET /tcfv2/42/cmp2ui-ru.js HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 604800
cache-control: max-age=172800
date: Wed, 08 Feb 2023 17:34:05 GMT
last-modified: Tue, 05 Jul 2022 18:40:39 GMT
etag: W/"2bcb12b495748cbed9b03befc38b13fb"
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AJHZhFu8MO2Qn0J1rnGm8HWMsrssW3eijJd0HLQyhQ6WOxxeybdYBw==
age: 21203
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
200 OK 0 B URL HTTP/2 rules.quantcount.com/rules-p-6Fv0cGNfc_bw8.js
IP
GET /rules-p-6Fv0cGNfc_bw8.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 13 Oct 2022 22:35:53 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Wed, 08 Feb 2023 22:42:31 GMT
cache-control: max-age=3600
etag: W/"1f431dc94c1f033d6666f0fe637e2d7b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RLqTnLqQAHopl2reTFgcrUkK-O9xuNFaAOILN-LdJfygBmnjVLYzQw==
age: 2696
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22site_id%22%3A123876%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A922772499%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22site_id%22%3A123876%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A922772499%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22site_id%22%3A123876%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A922772499%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22site_id%22%3A123876%7D&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A666476796756%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A922772499%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: http://ritorika.com.ua
set-cookie: yabs-sid=2643656591675898847; Path=/; SameSite=None; Secure
i=NIcCjpYGI01sJ350E64RYHJ4QKNbw0Ugrr2JQL+GGGLBXkL4xN1iF5ZeBpzwbLIPOP2f8a3fCiribNz3BlaarPcf1Oo=; Expires=Sat, 05-Feb-2033 23:27:25 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=4521392171675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4521392171675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707434847.yc.1675898847#1707434847.yrts.1675898847#1707434847.yrtsi.1675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
vak345.com/s.js?v=b3746867bd721713ba85266604e78fa1
200 OK 0 B URL HTTP/2 vak345.com/s.js?v=b3746867bd721713ba85266604e78fa1
IP
GET /s.js?v=b3746867bd721713ba85266604e78fa1 HTTP/1.1
Host: vak345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-movieads-country: NO
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iA9%2FDCHth4i28YHSFShRUFBKhi%2FVxsTlR%2F4VyfR%2F2V98weEqEnDvATtcs8VTmSKp6fBoJdTl7%2B%2FYW5mrx7LNGGgw2H3clTs38ajHtUAZMyjZysjvNx%2FNYoV20trH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 796822bebf770afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fritorika.com.ua%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1122458033372%3Ahid%3A909138688%3Az%3A0%3Ai%3A20230208232826%3Aet%3A1675898906%3Arn%3A789902757%3Arqn%3A1%3Au%3A1675898906918006836%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C14%2C0%2C%2C0%2C%2C56%2C1%2C310%2C310%2C0%2C79%3Aco%3A0%3Ans%3A1675898904118%3Ast%3A1675898906&t=clc(0-0-0)rqnt(1)aw(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fritorika.com.ua%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1122458033372%3Ahid%3A909138688%3Az%3A0%3Ai%3A20230208232826%3Aet%3A1675898906%3Arn%3A789902757%3Arqn%3A1%3Au%3A1675898906918006836%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C14%2C0%2C%2C0%2C%2C56%2C1%2C310%2C310%2C0%2C79%3Aco%3A0%3Ans%3A1675898904118%3Ast%3A1675898906&t=clc(0-0-0)rqnt(1)aw(1)ti(2)
IP
GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fritorika.com.ua%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1122458033372%3Ahid%3A909138688%3Az%3A0%3Ai%3A20230208232826%3Aet%3A1675898906%3Arn%3A789902757%3Arqn%3A1%3Au%3A1675898906918006836%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C14%2C0%2C%2C0%2C%2C56%2C1%2C310%2C310%2C0%2C79%3Aco%3A0%3Ans%3A1675898904118%3Ast%3A1675898906&t=clc(0-0-0)rqnt(1)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yastatic.net
Connection: keep-alive
Referer: https://yastatic.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=http%3A%2F%2Fritorika.com.ua%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1122458033372%3Ahid%3A909138688%3Az%3A0%3Ai%3A20230208232826%3Aet%3A1675898906%3Arn%3A789902757%3Arqn%3A1%3Au%3A1675898906918006836%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A0%2C0%2C14%2C0%2C%2C0%2C%2C56%2C1%2C310%2C310%2C0%2C79%3Aco%3A0%3Ans%3A1675898904118%3Ast%3A1675898906&t=clc%280-0-0%29rqnt%281%29aw%281%29ti%282%29
date: Wed, 08 Feb 2023 23:27:29 GMT
access-control-allow-origin: https://yastatic.net
set-cookie: yabs-sid=1321498651675898849; Path=/; SameSite=None; Secure
i=6WHrJOZG//9p1OTZztYsW3+1B/SKZFH/Eh8nqN9oDDWtQF4Y4dJ21y8yhZjd4givgecmbu7LWgZvvdQoeXsQKsqb3cE=; Expires=Sat, 05-Feb-2033 23:27:26 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1645869201675898849; Expires=Thu, 08-Feb-2024 23:27:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1645869201675898849; Expires=Thu, 08-Feb-2024 23:27:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707434849.yc.1675898849#1707434849.yrts.1675898849#1707434849.yrtsi.1675898849; Expires=Thu, 08-Feb-2024 23:27:29 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:29 GMT
last-modified: Wed, 08-Feb-2023 23:27:29 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn.alfasense.net/lib/prebid.js
200 OK 0 B URL HTTP/2 cdn.alfasense.net/lib/prebid.js
IP
ASN #52000 Innovation IT Solutions LTD
GET /lib/prebid.js HTTP/1.1
Host: cdn.alfasense.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:25 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 14:52:12 GMT
etag: W/"63becd1c-2b806"
content-security-policy: frame-ancestors 'none';frame-src 'self';
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
permissions-policy: geolocation=(self), payment=(self)
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block;
cache-control: public, max-age=60
content-encoding: gzip
set-cookie: route=dd92c318b574e2af8018c0207c5098f9; Path=/
SRVGROUP=common; path=/; Secure; HttpOnly
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=147&r=2&j=criteoCallback
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=147&r=2&j=criteoCallback
IP
GET /sync?c=147&r=2&j=criteoCallback HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
x-crto-bundle: dvOV8l9MUmZWRiUyQndjTTNkZHFPZndxcGZSRyUyQjNKejRHd05tbURFZllpSVFITlJReDlEOXExSUVxSTllayUyQmpnTjFyQ2FZcHB1RktkcUlMY2k5NmglMkIxNVF5bjNJdkVpUnJhZTJKSnhqdExDMXFVVnkyYW1oYXhHWVhGcyUyQnEySGppWUtzaGg
Origin: http://ritorika.com.ua
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: http://ritorika.com.ua
server-processing-duration-in-ticks: 1398874
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID
302 Found 0 B URL HTTP/2 csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID
IP
GET /getuid?source=prebid-server&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fib.adnxs.com%2Fprebid%2Fsetuid%3Fbidder%3Dsmilewanted%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D%24UID HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://csync.smilewanted.com/
Cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw822et3AB9FnSxQj2hd8waLUUlXpVg1HepnV47NPTX8MXN%2F0uP5zPYtdnCRViiRox6wETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6vpk9dHVhJCXGDpHlmsrCRw%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Wed, 08 Feb 2023 23:27:30 GMT
content-type: text/html; charset=UTF-8
location: https://ib.adnxs.com/prebid/setuid?bidder=smilewanted&gdpr=0&gdpr_consent=&f=i&uid=48d37e37f0663ec58e856e701d974d50
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822e9eab7b50b-OSL
X-Firefox-Spdy: h2
www.acint.net/oci.js?t=1675898900991
200 OK 0 B URL HTTP/2 www.acint.net/oci.js?t=1675898900991
IP
GET /oci.js?t=1675898900991 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/x-javascript
last-modified: Mon, 09 Jan 2023 08:01:14 GMT
etag: W/"63bbc9ca-7dac"
content-encoding: gzip
X-Firefox-Spdy: h2
spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
200 OK 0 B URL HTTP/2 spl.zeotap.com/?env=mWeb&eventType=pageview&zdid=1258
IP
GET /?env=mWeb&eventType=pageview&zdid=1258 HTTP/1.1
Host: spl.zeotap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: http://ritorika.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: http://ritorika.com.ua
set-cookie: zc=418dd0bf-0189-4922-79e7-c376ca375247; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure
zsc=%F9%A53%7Fkk%B9A%E0hv%00%06%A4R%D3%93%C1%07%DB%CBu%91%AEU%E9%DB%8D%27%16%27T%EDd%8F%0Er%9D%01%F5H%B2v%04%0Cq%C6%24%C2%8A%0B%A3KO%5B%0E%12Y%5C%D4%90%B6%7D6%CFV%3B%F8%CC%13%FDQ%AC%DF%C0%A2%1CS%86%13%F7%7D%A8; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure
vary: Origin
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822c42f360b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
ads.betweendigital.com/adjson?t=prebid
200 OK 0 B URL HTTP/2 ads.betweendigital.com/adjson?t=prebid
IP
POST /adjson?t=prebid HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 458
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=5b7f96ad-923a-5228-a8d3-d212cb37fdcf; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QAKXFj_2en9zTJaWNNRxgsmrynr_HOA5A==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.alfasense.net/lib/ad_builder.min.js
200 OK 0 B URL HTTP/2 cdn.alfasense.net/lib/ad_builder.min.js
IP
ASN #52000 Innovation IT Solutions LTD
GET /lib/ad_builder.min.js HTTP/1.1
Host: cdn.alfasense.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
last-modified: Fri, 09 Sep 2022 06:34:34 GMT
etag: W/"631ade7a-28b4"
content-security-policy: frame-ancestors 'none';frame-src 'self';
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
permissions-policy: geolocation=(self), payment=(self)
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block;
cache-control: public, max-age=60
content-encoding: gzip
set-cookie: route=e7a39e6e3385558e2f6a6a18cac7185b; Path=/
SRVGROUP=common; path=/; Secure; HttpOnly
X-Firefox-Spdy: h2
cdn.alfasense.net/lib/alfadart.lib.min.js
200 OK 0 B URL HTTP/2 cdn.alfasense.net/lib/alfadart.lib.min.js
IP
ASN #52000 Innovation IT Solutions LTD
GET /lib/alfadart.lib.min.js HTTP/1.1
Host: cdn.alfasense.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 08:28:42 GMT
etag: W/"63db743a-a393"
content-security-policy: frame-ancestors 'none';frame-src 'self';
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
permissions-policy: geolocation=(self), payment=(self)
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block;
cache-control: public, max-age=60
content-encoding: gzip
set-cookie: route=dd92c318b574e2af8018c0207c5098f9; Path=/
SRVGROUP=common; path=/; Secure; HttpOnly
X-Firefox-Spdy: h2
mc.yandex.ru/watch/81608569?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A732765849%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/81608569?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A732765849%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/81608569?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A732765849%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/81608569/1?wmode=7&page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1381%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A3%3Adp%3A0%3Als%3A208401145680%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232823%3Aet%3A1675898903%3Ac%3A1%3Arn%3A732765849%3Arqn%3A1%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A42%2C38%2C436%2C0%2C-6%2C0%2C%2C935%2C68%2C%2C%2C%2C1487%3Aco%3A0%3Ans%3A1675898899507%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898903%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-2%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 08 Feb 2023 23:27:27 GMT
access-control-allow-origin: http://ritorika.com.ua
set-cookie: yabs-sid=1164255171675898847; Path=/; SameSite=None; Secure
i=K6KzB3s5++b2ZjroHSi/y+rAcPMaE+optP6SsycbXgqh3JaVRtW0J/MiX6nBu3+eF935Vt9zmvwtimCTIgM+FLX/msI=; Expires=Sat, 05-Feb-2033 23:27:21 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9923410291675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9923410291675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707434847.yc.1675898847#1707434847.yrts.1675898847#1707434847.yrtsi.1675898847; Expires=Thu, 08-Feb-2024 23:27:27 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:27 GMT
last-modified: Wed, 08-Feb-2023 23:27:27 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yandex.ru/ads/meta/2174240?target-ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&pcode-test-ids=657518%2C0%2C13%3B685681%2C0%2C25%3B718868%2C0%2C81%3B716605%2C0%2C91%3B719185%2C0%2C86%3B717981%2C0%2C60%3B709000%2C0%2C42%3B718954%2C0%2C37%3B713622%2C0%2C71%3B716919%2C0%2C60&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUnZdYuCcFs38W4uizTpdlv033coyrYkO3STLVCkjuI5HM7lzBl9n5BpRRmWJeEcZzJDAskaMVRymVMmFyTDVJJKprRM6OTV2%2B%2BTL%2Burh83k1WTz9e%2FJi8n95vM9%2BQi%2F%2BrHl%2Bf7kx7sXkwXikuE%2FGsyFXJSoljmjpUQZH9gL1uA%2BQGCHTmS1ALhCSYFHh8OHnFREYPAvnfMZFXJJxIw2QiLwXXCTd4HvB5H7ZPBfgYyKQtaMZk0q%2BPExT4PGAPnEvPRAVF7gzCWkQhYowUULBSAJqirMzNkJXNcL%2B75UeCn5HKzhnwKkKMNM1gVajaDGDkW%2BE8d7h0hVoymWXJB0vpIZ4Qo8a6OWqNRmOX0NjxlOheS4KAbQ%2BHU9hA5t5wDd8KGXFarqxnzL2A4tbw8gZgyihRlTYcolb9gCryDkkMSpJFxWUCYLVJDsDKgT%2BNEeFGUq%2BitVtx2SoLpNup4xgoVW6EXhAawowENaFStZN0lBUolq0qYVUsIFdLYZzbYt3%2B41bUkXWNICbMkbvCcC1b4%2F76HtRp51KDihmwIzTmg1sAztILC9oW0UBfawWPe9QytwCHJ65vTYc8OjntmDFARICWph3KSsNNUsoPquJremIl2pt1Eu677d%2Fd3DpmfmOZEb61CoWuS87baRzfisnpHKIcaVpAnHUHqjtrpZv7%2FaDCzdwIn13XPyGii9kjNMpjMhK2E%2B0vPdWId9haoMv5askRktEamMlG%2BFjhvsz0sYnYOzcJacslFPjC3t0I%2BCkwcqChCMJEZzx7YC3aZvcOXIvAG2WJIMCJuUwCZGW8%2F2ujHT2naMIxPKVFIZykjDf%2FtJhBVSfmuHoReXaGWcFT6UZhfnLFfdxGtaQWEIUmLgg4GpY1nW0NazXH3nOqUZVuTBcWUcIL7nA0xXSopHGVa1uztPKvo0mnth6BybAxXCz6VqUKjO5yDsHADybAbZcq3T1gVGrJKlUioLxAga3dsZHOpbVhflmhHKiFjJZAUdj5c1ZeaABWHQ9d6uLrrRk3LjUPNhcES9ioThkCKYGzDA0hSyxA0s4ceub9sD27aK%2BV7f1DAzSDU1g3h%2Bx7opbSoBpSxWNZau2WuYJX4vPSVLIU6cJKSAqJmPi8PgUUvF1SlMo%2FmZ03cYZVMIolWIBILNCSgAoi6Ro9TczXHkhGHPjw5E0zsMVig2JUkSkFuqYwSjRXFGn1iO5%2BqqmzKUOObvQolah%2B%2B2Y7Nv4NuOZfr%2Bic63%2FUcsdsUxw%2B34YTjDHNS70T%2FbdwJtrYQQwzlwzgy02pSkZrvI7Qi21SisVB3EcLWbezXDiZniA%2BBoxx60EsxABnVdQTfNMORD0TZPmZpwnBuZKLBj2%2FMGYDMiWk96IBCPuaBmIDd0nIGkTutSljgjSAIIEmTRzmkzRuwOF5W0Tv83xkiQZDhH0BRPXBg83wqCQZh4iZiQoNoarMDPxdkPguCwxGn9O%2FJMy2GqFHWrfSUvzngV2mHXUKmS9bTqCgnliqZIDiIT6%2F3BXFFhFAfxXk3ljAAMCF9tr4RVbb7c0D6ZH3XrkUUQu13Z9SyeuhkHYexZ4R4FRlmmEIyCMwgirxPCvZN1kZnPchxLx7rXGEqO%2FVR3RIFnu7u2B1UDkhmuCkUjXcfSMqulda2YjrfGI7wwco9vIabmO0CaooPVgbW5rGEiwHAENb%2FA5XisTj59lve3Dx8uRxudFTnjvVUz54k8dlv%2FmeTAQtc1r24vWDBrKVg7Y85NvSCGBaVbj4ZH5wXVe5t29AxI1LXUYyBtpQ7Ds%2F0qr9df5eVme3F5%2FwgcqaCL5BwnKJEg6o1LkQXqYdDXmhqWMyi5XvWpLVlvug3MrHarB0mFgSWN7R7alteJE8akHl%2BiARWoaaMNdMtQzXR2dsn1dN8X6M2qZRrZaui%2B2ffJp839h8tyfXexvemm8PXt%2B%2B3Vhn9YX21vLiavnB8DVB%2BkR68INMeCpJZJoSpBbZr9A95Ortfbq5d3D%2BDbv%2Bubj5uv8Pn37fX6YvN58Ohifd0%2B%2Bfhtc6O%2Fvv6yvb%2FVH69f9n75eLPtnirkPQI8uFt%2Fu7r9dtn9%2Bdud%2Fv%2Fhbv3yZvPP56Mv%2FLm%2Bvd62pu9OX7HfvofUmtMX7Op8YKzqE51JPFjap4p7NxQVIOgIUBPFQHR2a7IE5kICT1fmU2IvcE%2B20KF0f%2FVBMFM7FmrVLYfNgtDDft9xSO8kxXWYqzcnZ16eRv6OM1HGs%2Fn4ZUH7YiU6etUSdct70Q5ivXSA0EsLBGeCCmfDUz%2FcX40SFVj%2BWQhgk2GArm5v%2F3oOztG2CMvtaZj%2B9FIS5qRWPrpNbEfH5inlaoGQ0ONzLOBjqhwT1ck9VL3bg6UDVj8xhA7jLjunoJekyBLgToKNbw96KKqQFjUihk16EBkrtqzDK7luOXqGpeoHBHw%2BU7VKSthJD9tV%2B7IQq6rusb0x4M%2FBNg%2BkAWDS5Dlg4bKGRioA8Wl37cxb0fPUWLXT5UQPxv74dad68uPdj%2F8ArziBww%3D%3D&pcode-icookie=Iigrgrqsqo2%2Bam12OBys2jFrLVovMk1AqeKLKyE%2FKPOiqZLQoe8QLWrCa1xgZOWimfwleAlSkxprxQbNR%2FT9inOk34Y%3D&imp-id=1&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=58274116272130&ad-session-id=1885451675898902718&target-id=61009940&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fritorika.com.ua&top-ancestor-undetermined=0&pcode-version=718954&pcodever=718954&flash-ver=0&available-width=789&gdpr=1&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A789%2C%22h%22%3A0%2C%22width%22%3A789%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A240%2C%22top%22%3A314%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1NDV9CkqjoJDkJoqAILDOKmzyj5tQQ779qKp_XbquX5d9W7_h8rXltjutW7WtiQPZrY6TqKH2IZNuuk8UMpGuG17XxV3KLXfd1p_A_gbqCWwLYyDGCCAzrymFTDe52XiMEGOEAQExxgixkAloBp_JcpnoTDbTYsBgGgy-y8BnWosecwGZDD5DwMB2mTx3EGTgL5Amk71gTJdpuAwYzQVz0aEuBz4DqnuOqAyoDOhME3zwgCMGXPCpC_4L2GJymaxFGVlYGFpqrCxPSMOWO6sy0RalsXBkQlpk8WYpq8ExMYb7csZj4BwpLbPAaOZRlqKCBYi9a4MEwOH-UJqCIKHSuEwwMo0ZYGuHDQwVavuwnHkv8AvcLMVxF1asmfsyzGLyesSf2bIK5qLFWqR4w8bMctjjLAB7EWsZM5hoLhPygj66jCBr0fOm0y748JmAbXjShfHSxlx2eafDsrC0YIIcrAMS6jAN6uHJZgBhAaF0i7EGxgxcPf2cRTnguGfJQvL6XsdneRDxAT_VjTpAwZgeDSVPA96wBwEVt3wA_2JeOnG7SHuaQ0nBW4k6cGp-uiaCD5_aXSprem_klUDEBx1QWv4g4oPmgk9FLCSSUVIR2woySiqhXCizKYGjnKNC2LCmQtgwo5CQwXLJZQqRCBBpCSUioSO0iQhlCqHtkNmkCgKZ0BXJpSQyuwB2BmF3AMvJHHCpqeGDm4EnlYiJFEJHJFRIyRRiMlcKx6GQSUgcErH8oEVyMptCIXbEchJioUtkSwngFlq4ItmChyuzSYW0lFRkcjh5YdhiBSGhLabtAdvijKJBLhpFRi214diOCBw5oSOTS8FxRcQS2I5EusuSE4hoKV0mqK8pM8durvukxzwqjGntNGNDNRVChb8-MSkJ3IKJSL7DTrCRKuB4KzuOWALbLTBECrnUJV66zu5EEgr5DjCDEiooZLbQlSlgSQiEDimBTOaQS6TC5W5_sMvMDtsNmfJmHQLvyKVSWxzAq1F7_DMTejSz0TDuxNEsUD7SFARy2TCz1CByyWwROELJzkfb2QHGqaUD3o6zDZB4CH10hQbhYagBhNzmxArRTBdJ6xOK5UQKMSxnCnI4wR3wHp8exievX0oIa-pBNj0bxIdXZm8RI5ClRA7h7SyaQYZAtkjL5FtclA8M3PWrFaxfmwgHyAICjA6y95ncCT8MbDWEgTgZsUxb9BGGzMRa3wej3fpkhR6ICQ6s8WUb8Sc8WlrEATPrP7Juij-gLVgtoiBPBBigItAICWR0-kUP0M5VtUg-uIrxbgDaIVRIbZlLN6Cr83AoSPQpL5OIbD2DnY2OUEIycTMmPAWBUCiRJiYURBQEYpKtTrnIUZAL5XBsj5vb6JafaBlKJaQQi6YmBqUHtIhcbNtSR9yrCG0gCSeqgv7a7ts8rmTP7xuygTSzjbD3RH5OPXZKqsfdILgNevoRPggPDp1YPpFILJSTL4Vi_ga8ZoAuuUR2117O_a5cCIuwHPj6diGByCEkoJDJRcSuzosT21KheF3tul4SySYqsIEVxtj1-eBl2NxrukfEORha4MKFEYM3adBZH_RMQSAklog3bBPZLulOZ3rYsIfnbjIryIjkUrlIKFYIJeLO5GpaTlShnCiNq6lLthRwa7g2GS0lAmDSLIDUCKipx3cQ2XSz0AuS07ZlsDvd7BTanRXhcl4AEFNTQvC92JFTD-NMUOI7c72Pthf44DDrg_Lmuv5G3f3sO9t_tHFy3h_q8oN5WE0ERV0moTFNZWL--Z479Tvwzepnns3-NlZ3c6x93EW7DmFQYOzyeOqfc9qy23LaRj9FF4bsWY5prb0P1lfYyuc1pwHW_Z_HOMU3GOFOYStTDbNvbA880IbrBqUZmrnjx9s5C9xIt1xzX6Y_AMrWJU7tPnS8r4c0kWRYob_Cznb6u6fik98yyjXxStF58fm9yjHdP7ihZG3zlvfeDDynqWxO62mmU1Pn_0sL86rxRU4Joe0QTEs-2jElF5RxJMyBj7K3HyPQcv8sZ0_emeLkNgyNBENFtWlP1mT73zganP4ZYa0cNUblBc5S7ZSMPXy8_8kzCxizLWY8902EmQqJgbsDbh81NIf5ZR6Hy3iroP8B7P-aQXxDQ-ke7CxEp_Z3uj21T36RqdpA0XkMXdsDK7BMbT0TRcGuG8zlM88bb-2_TQldytM8qk9K7L7QPvN9-NPAhivKop0afUyr8aX1FxADV9m-En2BnUyfnnwyIEd7LSObpqNNakPze92Oo11z3IqfaC7AAM2ZvO8kfAAVPNsNbWq7t3G6EHAno1K8PWtm5yB3tl4OHeEWcNTXG4-rVo5gGKfFTTh-lcmYSJa-1s5v0g6l2xIm3OsBd-c_BZJbXV24sn-rhk_DROleE8OnBCGaf6-oN2rAr6hRlsyNWrN6nnOPMwNAzzR7fz2GeNpKm4yu6IJ-rsMEdxaIs-FtAoPZKv-ncw8kxVo3-qyBg56a7dTPxKkMqccxCH1tHyF2976oOArhQNE_3BdeRQ0z02D588IoF-RvynUAy5kzoWei_9vAz-G1_7oRdHxYezRGfbhndxmGfr1KkFfecNYzg1Ef8Q6aP9Y89dTrTXRh3dQqi6vpao3nqbIfLI73XETPi6PsBq0xnQnmaPHSTRPg5PhpRpe9DD_pzAyn0y8pRcOADO3JH0Z-_u4BQOWCHrWNSBNeldCmnzIt1dE3sTqUA1n3-AKKx0Bxdoe6OcoysCfkDdVCnzFsQB9UatEilTLgyp9y_JJ4TXZcDQrKCUJWVapft0Z5OLMLeSmH1dH0rb61eMrPOu2IpiSwnqrcmFhhE1JyWUo31iVSA17okji9TzExw4dJ15H0zea-FdPxO_gp06frKBIzHDz9oNKtJKyjbsQX0cdvA8zTa3423nS2By6oKuL2s8xh3lJPlCPuZaCvntv6f6F-bB1sd4LG6cZRqs4o9OmtrMLq7O_ChfCA-WF4l97IyaaLNbrwHwSOOUJg3Dnww6z4X8rl7mrfaUakSlzlMS87YTGMv5_U7NY3h55vPm5-Br05GNck8u-PwmeHXp6A3cZgml4J99-ehQdk-pdtngbY9ywc9w9zgEGvxFH7sfXAvP9mBr26bQ9pYrfuc023h8de7xj0QdP-x77u_ift8IbyxvFemixlBzZI31zQ4TvlbynK8kqYN5_fNFfrbLNNPjMP7XDOTtJ3kcj7zMBTWG2ssl_Xs21HxqFr6OGUeqvCy9UnNUY7nj-ZXKTpB-DFhijba0FP__W8O008GwC1l5qpvbKwpien_GPqfVWbaOp_0hyXDmwECEarjLVDBpAOs273ttv0hPtpSuJTtdzQ50c6TB_kjdl4S2-QCR6QDipnTB7zf14qWTCCGgnMBuNMoJxSvE8Pu63eOLCKl4HV61vFUJILez-L75jM2fphvROdaw8dhURPAOUxsGfe8fJ0x4l1wgruhe_ljeHd1YdW-jUjMzaN-_u9Fjl94EqZpoEZ-voZXUyul97WwjqSmn-6Ym1T9tnv_azf2mD5tjr-RpUBL9x2h_h5MmFJZO7tdGYQqX6fsLPg2Jr9w1ltbKI7Myl9nA9Hh-1fDO-x8W6jssIbm7dx6yjzU4ZG9Xhw-jqc4LfhWn4IpWNyu2oYWQNZEafLmOtZQgX3OI8tK5qkdgUuZUEaaRBE5UFJPQr5mmEYzfIHBM_d7wplqzJ60bI0nqXGswbHRRwGHWvqCjC65REFlXDjnP3T2rbTmFs7X6N07uhuuUZ-Vj4ckTeZk9U4v4G_9GnNkd487fLnmzHvrU4BXbupP_eUJjqpWLQWdzpuUm-2NQV1ds7W7uzzrMufK0XgvFz2xkbfTo0_K2c2YeF3YAzIM-I3ypcBZc3e6A13WSgvAH0V5D5wkzfkdVdRTqmb82mwft23Jp1VUQnTixNZG8NLAasz9dbBFIPytzyg01iHxm4F2l19chhBHL43gOfzLnO14ySa9miFk8pU1-g7lBBVZ9BMOMF9jRkudUbeqpiRXXy6QbvW-Ko2U1Faz9kGn_U-ZK8VLz2dJZ3UXszneVdnEI6srB-vL6BXyRvRKJxo1SEb9_XqxXLLRRxqCL3JjSfBjOqg4W0iKg3zxLS-F6cQu8LGXFC0Mw1T2aGc4zOsC7CX7WH2XWBFCy3WajohKG2JcJ6_MKID44VZok7BLatcOAMTjHwvrX7kUJAadh3Kx0vVkL3AGnXKQvNot8GsMYM-Zd-NC-Vd_7Vxi610gJfAlsokCrJUsYDzb8Mosj64_ijt_wx9JuiPNCAjLxaHUALkycmnj6OiYoDaVedHqVnoFnLpHPXr--5WqQ877arwQt3cfW__K9T6G-4VeuNssO_b-FfRHi37RKCNfhyGPs6UxVyWeUbknoE1m0KZnaAP0n3SYTCg-lro14-h_nc7sbk13qkwAqFELLalwobxWn5_XdfJrCOAXtFHoxwpw0X7M8L8TqdWXVp8bQRO2NNWn3SjOeWyfgpRGThD51aihtct61AqEjerE_6h3R3qxpBNAt8-oa84aSba3qpzFy3porh1wpxoHbDv0cFqg_PqmVbxLkPY_fLb7yj9nxmHbfbT-6OCXo9JjTzp3eoHNd6wmwC9vbqqQj7aDqH18Z627cBKnJOxiVlGQZbhc7oHRpVf0nFBzyTkr6vWVGqoDH70RD1CnShRKN59wYgHJp_o0uGml4Eb_X4hVFpKzJZCRk8dKsKnT-0Rkg8axLVDr8IKCilKzhJxx6gcgCCyhUlF8Cg4DlSfI_l3w2xl_qSgahJWOgVayzbvs8gvKeTqrFfkQlEXclYABMInJdBZloZvWQbq90-KF9zULC-YD3R3Jhh_ne0u7v1iVSa8T03SAoQcmvwqUeq0xWh09Qdno4zuJL874f0ZWomwulZHXf9iUQa6BCh0BZlodDUMgJRI9LdKooNHUA_0-QVqJ2iB2rsUeOHyF08ntVyya6KW6--1rLc7j37IMGKVmtngblWrgfzbipEppGTnyojEkzY4vuB0wrMyLnVAXbbeF_k5yQ4Q0ev5_MZmi3XoDOA3TduVB7oWTlaemnU5&uniformat=true&callback=Ya%5B9213874791438%5D
200 OK 0 B URL HTTP/2 yandex.ru/ads/meta/2174240?target-ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&pcode-test-ids=657518%2C0%2C13%3B685681%2C0%2C25%3B718868%2C0%2C81%3B716605%2C0%2C91%3B719185%2C0%2C86%3B717981%2C0%2C60%3B709000%2C0%2C42%3B718954%2C0%2C37%3B713622%2C0%2C71%3B716919%2C0%2C60&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUnZdYuCcFs38W4uizTpdlv033coyrYkO3STLVCkjuI5HM7lzBl9n5BpRRmWJeEcZzJDAskaMVRymVMmFyTDVJJKprRM6OTV2%2B%2BTL%2Burh83k1WTz9e%2FJi8n95vM9%2BQi%2F%2BrHl%2Bf7kx7sXkwXikuE%2FGsyFXJSoljmjpUQZH9gL1uA%2BQGCHTmS1ALhCSYFHh8OHnFREYPAvnfMZFXJJxIw2QiLwXXCTd4HvB5H7ZPBfgYyKQtaMZk0q%2BPExT4PGAPnEvPRAVF7gzCWkQhYowUULBSAJqirMzNkJXNcL%2B75UeCn5HKzhnwKkKMNM1gVajaDGDkW%2BE8d7h0hVoymWXJB0vpIZ4Qo8a6OWqNRmOX0NjxlOheS4KAbQ%2BHU9hA5t5wDd8KGXFarqxnzL2A4tbw8gZgyihRlTYcolb9gCryDkkMSpJFxWUCYLVJDsDKgT%2BNEeFGUq%2BitVtx2SoLpNup4xgoVW6EXhAawowENaFStZN0lBUolq0qYVUsIFdLYZzbYt3%2B41bUkXWNICbMkbvCcC1b4%2F76HtRp51KDihmwIzTmg1sAztILC9oW0UBfawWPe9QytwCHJ65vTYc8OjntmDFARICWph3KSsNNUsoPquJremIl2pt1Eu677d%2Fd3DpmfmOZEb61CoWuS87baRzfisnpHKIcaVpAnHUHqjtrpZv7%2FaDCzdwIn13XPyGii9kjNMpjMhK2E%2B0vPdWId9haoMv5askRktEamMlG%2BFjhvsz0sYnYOzcJacslFPjC3t0I%2BCkwcqChCMJEZzx7YC3aZvcOXIvAG2WJIMCJuUwCZGW8%2F2ujHT2naMIxPKVFIZykjDf%2FtJhBVSfmuHoReXaGWcFT6UZhfnLFfdxGtaQWEIUmLgg4GpY1nW0NazXH3nOqUZVuTBcWUcIL7nA0xXSopHGVa1uztPKvo0mnth6BybAxXCz6VqUKjO5yDsHADybAbZcq3T1gVGrJKlUioLxAga3dsZHOpbVhflmhHKiFjJZAUdj5c1ZeaABWHQ9d6uLrrRk3LjUPNhcES9ioThkCKYGzDA0hSyxA0s4ceub9sD27aK%2BV7f1DAzSDU1g3h%2Bx7opbSoBpSxWNZau2WuYJX4vPSVLIU6cJKSAqJmPi8PgUUvF1SlMo%2FmZ03cYZVMIolWIBILNCSgAoi6Ro9TczXHkhGHPjw5E0zsMVig2JUkSkFuqYwSjRXFGn1iO5%2BqqmzKUOObvQolah%2B%2B2Y7Nv4NuOZfr%2Bic63%2FUcsdsUxw%2B34YTjDHNS70T%2FbdwJtrYQQwzlwzgy02pSkZrvI7Qi21SisVB3EcLWbezXDiZniA%2BBoxx60EsxABnVdQTfNMORD0TZPmZpwnBuZKLBj2%2FMGYDMiWk96IBCPuaBmIDd0nIGkTutSljgjSAIIEmTRzmkzRuwOF5W0Tv83xkiQZDhH0BRPXBg83wqCQZh4iZiQoNoarMDPxdkPguCwxGn9O%2FJMy2GqFHWrfSUvzngV2mHXUKmS9bTqCgnliqZIDiIT6%2F3BXFFhFAfxXk3ljAAMCF9tr4RVbb7c0D6ZH3XrkUUQu13Z9SyeuhkHYexZ4R4FRlmmEIyCMwgirxPCvZN1kZnPchxLx7rXGEqO%2FVR3RIFnu7u2B1UDkhmuCkUjXcfSMqulda2YjrfGI7wwco9vIabmO0CaooPVgbW5rGEiwHAENb%2FA5XisTj59lve3Dx8uRxudFTnjvVUz54k8dlv%2FmeTAQtc1r24vWDBrKVg7Y85NvSCGBaVbj4ZH5wXVe5t29AxI1LXUYyBtpQ7Ds%2F0qr9df5eVme3F5%2FwgcqaCL5BwnKJEg6o1LkQXqYdDXmhqWMyi5XvWpLVlvug3MrHarB0mFgSWN7R7alteJE8akHl%2BiARWoaaMNdMtQzXR2dsn1dN8X6M2qZRrZaui%2B2ffJp839h8tyfXexvemm8PXt%2B%2B3Vhn9YX21vLiavnB8DVB%2BkR68INMeCpJZJoSpBbZr9A95Ortfbq5d3D%2BDbv%2Bubj5uv8Pn37fX6YvN58Ohifd0%2B%2Bfhtc6O%2Fvv6yvb%2FVH69f9n75eLPtnirkPQI8uFt%2Fu7r9dtn9%2Bdud%2Fv%2Fhbv3yZvPP56Mv%2FLm%2Bvd62pu9OX7HfvofUmtMX7Op8YKzqE51JPFjap4p7NxQVIOgIUBPFQHR2a7IE5kICT1fmU2IvcE%2B20KF0f%2FVBMFM7FmrVLYfNgtDDft9xSO8kxXWYqzcnZ16eRv6OM1HGs%2Fn4ZUH7YiU6etUSdct70Q5ivXSA0EsLBGeCCmfDUz%2FcX40SFVj%2BWQhgk2GArm5v%2F3oOztG2CMvtaZj%2B9FIS5qRWPrpNbEfH5inlaoGQ0ONzLOBjqhwT1ck9VL3bg6UDVj8xhA7jLjunoJekyBLgToKNbw96KKqQFjUihk16EBkrtqzDK7luOXqGpeoHBHw%2BU7VKSthJD9tV%2B7IQq6rusb0x4M%2FBNg%2BkAWDS5Dlg4bKGRioA8Wl37cxb0fPUWLXT5UQPxv74dad68uPdj%2F8ArziBww%3D%3D&pcode-icookie=Iigrgrqsqo2%2Bam12OBys2jFrLVovMk1AqeKLKyE%2FKPOiqZLQoe8QLWrCa1xgZOWimfwleAlSkxprxQbNR%2FT9inOk34Y%3D&imp-id=1&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=58274116272130&ad-session-id=1885451675898902718&target-id=61009940&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fritorika.com.ua&top-ancestor-undetermined=0&pcode-version=718954&pcodever=718954&flash-ver=0&available-width=789&gdpr=1&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A789%2C%22h%22%3A0%2C%22width%22%3A789%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A240%2C%22top%22%3A314%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1NDV9CkqjoJDkJoqAILDOKmzyj5tQQ779qKp_XbquX5d9W7_h8rXltjutW7WtiQPZrY6TqKH2IZNuuk8UMpGuG17XxV3KLXfd1p_A_gbqCWwLYyDGCCAzrymFTDe52XiMEGOEAQExxgixkAloBp_JcpnoTDbTYsBgGgy-y8BnWosecwGZDD5DwMB2mTx3EGTgL5Amk71gTJdpuAwYzQVz0aEuBz4DqnuOqAyoDOhME3zwgCMGXPCpC_4L2GJymaxFGVlYGFpqrCxPSMOWO6sy0RalsXBkQlpk8WYpq8ExMYb7csZj4BwpLbPAaOZRlqKCBYi9a4MEwOH-UJqCIKHSuEwwMo0ZYGuHDQwVavuwnHkv8AvcLMVxF1asmfsyzGLyesSf2bIK5qLFWqR4w8bMctjjLAB7EWsZM5hoLhPygj66jCBr0fOm0y748JmAbXjShfHSxlx2eafDsrC0YIIcrAMS6jAN6uHJZgBhAaF0i7EGxgxcPf2cRTnguGfJQvL6XsdneRDxAT_VjTpAwZgeDSVPA96wBwEVt3wA_2JeOnG7SHuaQ0nBW4k6cGp-uiaCD5_aXSprem_klUDEBx1QWv4g4oPmgk9FLCSSUVIR2woySiqhXCizKYGjnKNC2LCmQtgwo5CQwXLJZQqRCBBpCSUioSO0iQhlCqHtkNmkCgKZ0BXJpSQyuwB2BmF3AMvJHHCpqeGDm4EnlYiJFEJHJFRIyRRiMlcKx6GQSUgcErH8oEVyMptCIXbEchJioUtkSwngFlq4ItmChyuzSYW0lFRkcjh5YdhiBSGhLabtAdvijKJBLhpFRi214diOCBw5oSOTS8FxRcQS2I5EusuSE4hoKV0mqK8pM8durvukxzwqjGntNGNDNRVChb8-MSkJ3IKJSL7DTrCRKuB4KzuOWALbLTBECrnUJV66zu5EEgr5DjCDEiooZLbQlSlgSQiEDimBTOaQS6TC5W5_sMvMDtsNmfJmHQLvyKVSWxzAq1F7_DMTejSz0TDuxNEsUD7SFARy2TCz1CByyWwROELJzkfb2QHGqaUD3o6zDZB4CH10hQbhYagBhNzmxArRTBdJ6xOK5UQKMSxnCnI4wR3wHp8exievX0oIa-pBNj0bxIdXZm8RI5ClRA7h7SyaQYZAtkjL5FtclA8M3PWrFaxfmwgHyAICjA6y95ncCT8MbDWEgTgZsUxb9BGGzMRa3wej3fpkhR6ICQ6s8WUb8Sc8WlrEATPrP7Juij-gLVgtoiBPBBigItAICWR0-kUP0M5VtUg-uIrxbgDaIVRIbZlLN6Cr83AoSPQpL5OIbD2DnY2OUEIycTMmPAWBUCiRJiYURBQEYpKtTrnIUZAL5XBsj5vb6JafaBlKJaQQi6YmBqUHtIhcbNtSR9yrCG0gCSeqgv7a7ts8rmTP7xuygTSzjbD3RH5OPXZKqsfdILgNevoRPggPDp1YPpFILJSTL4Vi_ga8ZoAuuUR2117O_a5cCIuwHPj6diGByCEkoJDJRcSuzosT21KheF3tul4SySYqsIEVxtj1-eBl2NxrukfEORha4MKFEYM3adBZH_RMQSAklog3bBPZLulOZ3rYsIfnbjIryIjkUrlIKFYIJeLO5GpaTlShnCiNq6lLthRwa7g2GS0lAmDSLIDUCKipx3cQ2XSz0AuS07ZlsDvd7BTanRXhcl4AEFNTQvC92JFTD-NMUOI7c72Pthf44DDrg_Lmuv5G3f3sO9t_tHFy3h_q8oN5WE0ERV0moTFNZWL--Z479Tvwzepnns3-NlZ3c6x93EW7DmFQYOzyeOqfc9qy23LaRj9FF4bsWY5prb0P1lfYyuc1pwHW_Z_HOMU3GOFOYStTDbNvbA880IbrBqUZmrnjx9s5C9xIt1xzX6Y_AMrWJU7tPnS8r4c0kWRYob_Cznb6u6fik98yyjXxStF58fm9yjHdP7ihZG3zlvfeDDynqWxO62mmU1Pn_0sL86rxRU4Joe0QTEs-2jElF5RxJMyBj7K3HyPQcv8sZ0_emeLkNgyNBENFtWlP1mT73zganP4ZYa0cNUblBc5S7ZSMPXy8_8kzCxizLWY8902EmQqJgbsDbh81NIf5ZR6Hy3iroP8B7P-aQXxDQ-ke7CxEp_Z3uj21T36RqdpA0XkMXdsDK7BMbT0TRcGuG8zlM88bb-2_TQldytM8qk9K7L7QPvN9-NPAhivKop0afUyr8aX1FxADV9m-En2BnUyfnnwyIEd7LSObpqNNakPze92Oo11z3IqfaC7AAM2ZvO8kfAAVPNsNbWq7t3G6EHAno1K8PWtm5yB3tl4OHeEWcNTXG4-rVo5gGKfFTTh-lcmYSJa-1s5v0g6l2xIm3OsBd-c_BZJbXV24sn-rhk_DROleE8OnBCGaf6-oN2rAr6hRlsyNWrN6nnOPMwNAzzR7fz2GeNpKm4yu6IJ-rsMEdxaIs-FtAoPZKv-ncw8kxVo3-qyBg56a7dTPxKkMqccxCH1tHyF2976oOArhQNE_3BdeRQ0z02D588IoF-RvynUAy5kzoWei_9vAz-G1_7oRdHxYezRGfbhndxmGfr1KkFfecNYzg1Ef8Q6aP9Y89dTrTXRh3dQqi6vpao3nqbIfLI73XETPi6PsBq0xnQnmaPHSTRPg5PhpRpe9DD_pzAyn0y8pRcOADO3JH0Z-_u4BQOWCHrWNSBNeldCmnzIt1dE3sTqUA1n3-AKKx0Bxdoe6OcoysCfkDdVCnzFsQB9UatEilTLgyp9y_JJ4TXZcDQrKCUJWVapft0Z5OLMLeSmH1dH0rb61eMrPOu2IpiSwnqrcmFhhE1JyWUo31iVSA17okji9TzExw4dJ15H0zea-FdPxO_gp06frKBIzHDz9oNKtJKyjbsQX0cdvA8zTa3423nS2By6oKuL2s8xh3lJPlCPuZaCvntv6f6F-bB1sd4LG6cZRqs4o9OmtrMLq7O_ChfCA-WF4l97IyaaLNbrwHwSOOUJg3Dnww6z4X8rl7mrfaUakSlzlMS87YTGMv5_U7NY3h55vPm5-Br05GNck8u-PwmeHXp6A3cZgml4J99-ehQdk-pdtngbY9ywc9w9zgEGvxFH7sfXAvP9mBr26bQ9pYrfuc023h8de7xj0QdP-x77u_ift8IbyxvFemixlBzZI31zQ4TvlbynK8kqYN5_fNFfrbLNNPjMP7XDOTtJ3kcj7zMBTWG2ssl_Xs21HxqFr6OGUeqvCy9UnNUY7nj-ZXKTpB-DFhijba0FP__W8O008GwC1l5qpvbKwpien_GPqfVWbaOp_0hyXDmwECEarjLVDBpAOs273ttv0hPtpSuJTtdzQ50c6TB_kjdl4S2-QCR6QDipnTB7zf14qWTCCGgnMBuNMoJxSvE8Pu63eOLCKl4HV61vFUJILez-L75jM2fphvROdaw8dhURPAOUxsGfe8fJ0x4l1wgruhe_ljeHd1YdW-jUjMzaN-_u9Fjl94EqZpoEZ-voZXUyul97WwjqSmn-6Ym1T9tnv_azf2mD5tjr-RpUBL9x2h_h5MmFJZO7tdGYQqX6fsLPg2Jr9w1ltbKI7Myl9nA9Hh-1fDO-x8W6jssIbm7dx6yjzU4ZG9Xhw-jqc4LfhWn4IpWNyu2oYWQNZEafLmOtZQgX3OI8tK5qkdgUuZUEaaRBE5UFJPQr5mmEYzfIHBM_d7wplqzJ60bI0nqXGswbHRRwGHWvqCjC65REFlXDjnP3T2rbTmFs7X6N07uhuuUZ-Vj4ckTeZk9U4v4G_9GnNkd487fLnmzHvrU4BXbupP_eUJjqpWLQWdzpuUm-2NQV1ds7W7uzzrMufK0XgvFz2xkbfTo0_K2c2YeF3YAzIM-I3ypcBZc3e6A13WSgvAH0V5D5wkzfkdVdRTqmb82mwft23Jp1VUQnTixNZG8NLAasz9dbBFIPytzyg01iHxm4F2l19chhBHL43gOfzLnO14ySa9miFk8pU1-g7lBBVZ9BMOMF9jRkudUbeqpiRXXy6QbvW-Ko2U1Faz9kGn_U-ZK8VLz2dJZ3UXszneVdnEI6srB-vL6BXyRvRKJxo1SEb9_XqxXLLRRxqCL3JjSfBjOqg4W0iKg3zxLS-F6cQu8LGXFC0Mw1T2aGc4zOsC7CX7WH2XWBFCy3WajohKG2JcJ6_MKID44VZok7BLatcOAMTjHwvrX7kUJAadh3Kx0vVkL3AGnXKQvNot8GsMYM-Zd-NC-Vd_7Vxi610gJfAlsokCrJUsYDzb8Mosj64_ijt_wx9JuiPNCAjLxaHUALkycmnj6OiYoDaVedHqVnoFnLpHPXr--5WqQ877arwQt3cfW__K9T6G-4VeuNssO_b-FfRHi37RKCNfhyGPs6UxVyWeUbknoE1m0KZnaAP0n3SYTCg-lro14-h_nc7sbk13qkwAqFELLalwobxWn5_XdfJrCOAXtFHoxwpw0X7M8L8TqdWXVp8bQRO2NNWn3SjOeWyfgpRGThD51aihtct61AqEjerE_6h3R3qxpBNAt8-oa84aSba3qpzFy3porh1wpxoHbDv0cFqg_PqmVbxLkPY_fLb7yj9nxmHbfbT-6OCXo9JjTzp3eoHNd6wmwC9vbqqQj7aDqH18Z627cBKnJOxiVlGQZbhc7oHRpVf0nFBzyTkr6vWVGqoDH70RD1CnShRKN59wYgHJp_o0uGml4Eb_X4hVFpKzJZCRk8dKsKnT-0Rkg8axLVDr8IKCilKzhJxx6gcgCCyhUlF8Cg4DlSfI_l3w2xl_qSgahJWOgVayzbvs8gvKeTqrFfkQlEXclYABMInJdBZloZvWQbq90-KF9zULC-YD3R3Jhh_ne0u7v1iVSa8T03SAoQcmvwqUeq0xWh09Qdno4zuJL874f0ZWomwulZHXf9iUQa6BCh0BZlodDUMgJRI9LdKooNHUA_0-QVqJ2iB2rsUeOHyF08ntVyya6KW6--1rLc7j37IMGKVmtngblWrgfzbipEppGTnyojEkzY4vuB0wrMyLnVAXbbeF_k5yQ4Q0ev5_MZmi3XoDOA3TduVB7oWTlaemnU5&uniformat=true&callback=Ya%5B9213874791438%5D
IP
GET /ads/meta/2174240?target-ref=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&pcode-test-ids=657518%2C0%2C13%3B685681%2C0%2C25%3B718868%2C0%2C81%3B716605%2C0%2C91%3B719185%2C0%2C86%3B717981%2C0%2C60%3B709000%2C0%2C42%3B718954%2C0%2C37%3B713622%2C0%2C71%3B716919%2C0%2C60&pcode-flags-map=eJytWNtu2zgQ%2FZWFn4uu7pe%2BURJlE5ZELUnZdYuCcFs38W4uizTpdlv033coyrYkO3STLVCkjuI5HM7lzBl9n5BpRRmWJeEcZzJDAskaMVRymVMmFyTDVJJKprRM6OTV2%2B%2BTL%2Burh83k1WTz9e%2FJi8n95vM9%2BQi%2F%2BrHl%2Bf7kx7sXkwXikuE%2FGsyFXJSoljmjpUQZH9gL1uA%2BQGCHTmS1ALhCSYFHh8OHnFREYPAvnfMZFXJJxIw2QiLwXXCTd4HvB5H7ZPBfgYyKQtaMZk0q%2BPExT4PGAPnEvPRAVF7gzCWkQhYowUULBSAJqirMzNkJXNcL%2B75UeCn5HKzhnwKkKMNM1gVajaDGDkW%2BE8d7h0hVoymWXJB0vpIZ4Qo8a6OWqNRmOX0NjxlOheS4KAbQ%2BHU9hA5t5wDd8KGXFarqxnzL2A4tbw8gZgyihRlTYcolb9gCryDkkMSpJFxWUCYLVJDsDKgT%2BNEeFGUq%2BitVtx2SoLpNup4xgoVW6EXhAawowENaFStZN0lBUolq0qYVUsIFdLYZzbYt3%2B41bUkXWNICbMkbvCcC1b4%2F76HtRp51KDihmwIzTmg1sAztILC9oW0UBfawWPe9QytwCHJ65vTYc8OjntmDFARICWph3KSsNNUsoPquJremIl2pt1Eu677d%2Fd3DpmfmOZEb61CoWuS87baRzfisnpHKIcaVpAnHUHqjtrpZv7%2FaDCzdwIn13XPyGii9kjNMpjMhK2E%2B0vPdWId9haoMv5askRktEamMlG%2BFjhvsz0sYnYOzcJacslFPjC3t0I%2BCkwcqChCMJEZzx7YC3aZvcOXIvAG2WJIMCJuUwCZGW8%2F2ujHT2naMIxPKVFIZykjDf%2FtJhBVSfmuHoReXaGWcFT6UZhfnLFfdxGtaQWEIUmLgg4GpY1nW0NazXH3nOqUZVuTBcWUcIL7nA0xXSopHGVa1uztPKvo0mnth6BybAxXCz6VqUKjO5yDsHADybAbZcq3T1gVGrJKlUioLxAga3dsZHOpbVhflmhHKiFjJZAUdj5c1ZeaABWHQ9d6uLrrRk3LjUPNhcES9ioThkCKYGzDA0hSyxA0s4ceub9sD27aK%2BV7f1DAzSDU1g3h%2Bx7opbSoBpSxWNZau2WuYJX4vPSVLIU6cJKSAqJmPi8PgUUvF1SlMo%2FmZ03cYZVMIolWIBILNCSgAoi6Ro9TczXHkhGHPjw5E0zsMVig2JUkSkFuqYwSjRXFGn1iO5%2BqqmzKUOObvQolah%2B%2B2Y7Nv4NuOZfr%2Bic63%2FUcsdsUxw%2B34YTjDHNS70T%2FbdwJtrYQQwzlwzgy02pSkZrvI7Qi21SisVB3EcLWbezXDiZniA%2BBoxx60EsxABnVdQTfNMORD0TZPmZpwnBuZKLBj2%2FMGYDMiWk96IBCPuaBmIDd0nIGkTutSljgjSAIIEmTRzmkzRuwOF5W0Tv83xkiQZDhH0BRPXBg83wqCQZh4iZiQoNoarMDPxdkPguCwxGn9O%2FJMy2GqFHWrfSUvzngV2mHXUKmS9bTqCgnliqZIDiIT6%2F3BXFFhFAfxXk3ljAAMCF9tr4RVbb7c0D6ZH3XrkUUQu13Z9SyeuhkHYexZ4R4FRlmmEIyCMwgirxPCvZN1kZnPchxLx7rXGEqO%2FVR3RIFnu7u2B1UDkhmuCkUjXcfSMqulda2YjrfGI7wwco9vIabmO0CaooPVgbW5rGEiwHAENb%2FA5XisTj59lve3Dx8uRxudFTnjvVUz54k8dlv%2FmeTAQtc1r24vWDBrKVg7Y85NvSCGBaVbj4ZH5wXVe5t29AxI1LXUYyBtpQ7Ds%2F0qr9df5eVme3F5%2FwgcqaCL5BwnKJEg6o1LkQXqYdDXmhqWMyi5XvWpLVlvug3MrHarB0mFgSWN7R7alteJE8akHl%2BiARWoaaMNdMtQzXR2dsn1dN8X6M2qZRrZaui%2B2ffJp839h8tyfXexvemm8PXt%2B%2B3Vhn9YX21vLiavnB8DVB%2BkR68INMeCpJZJoSpBbZr9A95Ortfbq5d3D%2BDbv%2Bubj5uv8Pn37fX6YvN58Ohifd0%2B%2Bfhtc6O%2Fvv6yvb%2FVH69f9n75eLPtnirkPQI8uFt%2Fu7r9dtn9%2Bdud%2Fv%2Fhbv3yZvPP56Mv%2FLm%2Bvd62pu9OX7HfvofUmtMX7Op8YKzqE51JPFjap4p7NxQVIOgIUBPFQHR2a7IE5kICT1fmU2IvcE%2B20KF0f%2FVBMFM7FmrVLYfNgtDDft9xSO8kxXWYqzcnZ16eRv6OM1HGs%2Fn4ZUH7YiU6etUSdct70Q5ivXSA0EsLBGeCCmfDUz%2FcX40SFVj%2BWQhgk2GArm5v%2F3oOztG2CMvtaZj%2B9FIS5qRWPrpNbEfH5inlaoGQ0ONzLOBjqhwT1ck9VL3bg6UDVj8xhA7jLjunoJekyBLgToKNbw96KKqQFjUihk16EBkrtqzDK7luOXqGpeoHBHw%2BU7VKSthJD9tV%2B7IQq6rusb0x4M%2FBNg%2BkAWDS5Dlg4bKGRioA8Wl37cxb0fPUWLXT5UQPxv74dad68uPdj%2F8ArziBww%3D%3D&pcode-icookie=Iigrgrqsqo2%2Bam12OBys2jFrLVovMk1AqeKLKyE%2FKPOiqZLQoe8QLWrCa1xgZOWimfwleAlSkxprxQbNR%2FT9inOk34Y%3D&imp-id=1&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=58274116272130&ad-session-id=1885451675898902718&target-id=61009940&tga-with-creatives=1&top-ancestor=http%3A%2F%2Fritorika.com.ua&top-ancestor-undetermined=0&pcode-version=718954&pcodever=718954&flash-ver=0&available-width=789&gdpr=1&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A789%2C%22h%22%3A0%2C%22width%22%3A789%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A240%2C%22top%22%3A314%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo1NDV9CkqjoJDkJoqAILDOKmzyj5tQQ779qKp_XbquX5d9W7_h8rXltjutW7WtiQPZrY6TqKH2IZNuuk8UMpGuG17XxV3KLXfd1p_A_gbqCWwLYyDGCCAzrymFTDe52XiMEGOEAQExxgixkAloBp_JcpnoTDbTYsBgGgy-y8BnWosecwGZDD5DwMB2mTx3EGTgL5Amk71gTJdpuAwYzQVz0aEuBz4DqnuOqAyoDOhME3zwgCMGXPCpC_4L2GJymaxFGVlYGFpqrCxPSMOWO6sy0RalsXBkQlpk8WYpq8ExMYb7csZj4BwpLbPAaOZRlqKCBYi9a4MEwOH-UJqCIKHSuEwwMo0ZYGuHDQwVavuwnHkv8AvcLMVxF1asmfsyzGLyesSf2bIK5qLFWqR4w8bMctjjLAB7EWsZM5hoLhPygj66jCBr0fOm0y748JmAbXjShfHSxlx2eafDsrC0YIIcrAMS6jAN6uHJZgBhAaF0i7EGxgxcPf2cRTnguGfJQvL6XsdneRDxAT_VjTpAwZgeDSVPA96wBwEVt3wA_2JeOnG7SHuaQ0nBW4k6cGp-uiaCD5_aXSprem_klUDEBx1QWv4g4oPmgk9FLCSSUVIR2woySiqhXCizKYGjnKNC2LCmQtgwo5CQwXLJZQqRCBBpCSUioSO0iQhlCqHtkNmkCgKZ0BXJpSQyuwB2BmF3AMvJHHCpqeGDm4EnlYiJFEJHJFRIyRRiMlcKx6GQSUgcErH8oEVyMptCIXbEchJioUtkSwngFlq4ItmChyuzSYW0lFRkcjh5YdhiBSGhLabtAdvijKJBLhpFRi214diOCBw5oSOTS8FxRcQS2I5EusuSE4hoKV0mqK8pM8durvukxzwqjGntNGNDNRVChb8-MSkJ3IKJSL7DTrCRKuB4KzuOWALbLTBECrnUJV66zu5EEgr5DjCDEiooZLbQlSlgSQiEDimBTOaQS6TC5W5_sMvMDtsNmfJmHQLvyKVSWxzAq1F7_DMTejSz0TDuxNEsUD7SFARy2TCz1CByyWwROELJzkfb2QHGqaUD3o6zDZB4CH10hQbhYagBhNzmxArRTBdJ6xOK5UQKMSxnCnI4wR3wHp8exievX0oIa-pBNj0bxIdXZm8RI5ClRA7h7SyaQYZAtkjL5FtclA8M3PWrFaxfmwgHyAICjA6y95ncCT8MbDWEgTgZsUxb9BGGzMRa3wej3fpkhR6ICQ6s8WUb8Sc8WlrEATPrP7Juij-gLVgtoiBPBBigItAICWR0-kUP0M5VtUg-uIrxbgDaIVRIbZlLN6Cr83AoSPQpL5OIbD2DnY2OUEIycTMmPAWBUCiRJiYURBQEYpKtTrnIUZAL5XBsj5vb6JafaBlKJaQQi6YmBqUHtIhcbNtSR9yrCG0gCSeqgv7a7ts8rmTP7xuygTSzjbD3RH5OPXZKqsfdILgNevoRPggPDp1YPpFILJSTL4Vi_ga8ZoAuuUR2117O_a5cCIuwHPj6diGByCEkoJDJRcSuzosT21KheF3tul4SySYqsIEVxtj1-eBl2NxrukfEORha4MKFEYM3adBZH_RMQSAklog3bBPZLulOZ3rYsIfnbjIryIjkUrlIKFYIJeLO5GpaTlShnCiNq6lLthRwa7g2GS0lAmDSLIDUCKipx3cQ2XSz0AuS07ZlsDvd7BTanRXhcl4AEFNTQvC92JFTD-NMUOI7c72Pthf44DDrg_Lmuv5G3f3sO9t_tHFy3h_q8oN5WE0ERV0moTFNZWL--Z479Tvwzepnns3-NlZ3c6x93EW7DmFQYOzyeOqfc9qy23LaRj9FF4bsWY5prb0P1lfYyuc1pwHW_Z_HOMU3GOFOYStTDbNvbA880IbrBqUZmrnjx9s5C9xIt1xzX6Y_AMrWJU7tPnS8r4c0kWRYob_Cznb6u6fik98yyjXxStF58fm9yjHdP7ihZG3zlvfeDDynqWxO62mmU1Pn_0sL86rxRU4Joe0QTEs-2jElF5RxJMyBj7K3HyPQcv8sZ0_emeLkNgyNBENFtWlP1mT73zganP4ZYa0cNUblBc5S7ZSMPXy8_8kzCxizLWY8902EmQqJgbsDbh81NIf5ZR6Hy3iroP8B7P-aQXxDQ-ke7CxEp_Z3uj21T36RqdpA0XkMXdsDK7BMbT0TRcGuG8zlM88bb-2_TQldytM8qk9K7L7QPvN9-NPAhivKop0afUyr8aX1FxADV9m-En2BnUyfnnwyIEd7LSObpqNNakPze92Oo11z3IqfaC7AAM2ZvO8kfAAVPNsNbWq7t3G6EHAno1K8PWtm5yB3tl4OHeEWcNTXG4-rVo5gGKfFTTh-lcmYSJa-1s5v0g6l2xIm3OsBd-c_BZJbXV24sn-rhk_DROleE8OnBCGaf6-oN2rAr6hRlsyNWrN6nnOPMwNAzzR7fz2GeNpKm4yu6IJ-rsMEdxaIs-FtAoPZKv-ncw8kxVo3-qyBg56a7dTPxKkMqccxCH1tHyF2976oOArhQNE_3BdeRQ0z02D588IoF-RvynUAy5kzoWei_9vAz-G1_7oRdHxYezRGfbhndxmGfr1KkFfecNYzg1Ef8Q6aP9Y89dTrTXRh3dQqi6vpao3nqbIfLI73XETPi6PsBq0xnQnmaPHSTRPg5PhpRpe9DD_pzAyn0y8pRcOADO3JH0Z-_u4BQOWCHrWNSBNeldCmnzIt1dE3sTqUA1n3-AKKx0Bxdoe6OcoysCfkDdVCnzFsQB9UatEilTLgyp9y_JJ4TXZcDQrKCUJWVapft0Z5OLMLeSmH1dH0rb61eMrPOu2IpiSwnqrcmFhhE1JyWUo31iVSA17okji9TzExw4dJ15H0zea-FdPxO_gp06frKBIzHDz9oNKtJKyjbsQX0cdvA8zTa3423nS2By6oKuL2s8xh3lJPlCPuZaCvntv6f6F-bB1sd4LG6cZRqs4o9OmtrMLq7O_ChfCA-WF4l97IyaaLNbrwHwSOOUJg3Dnww6z4X8rl7mrfaUakSlzlMS87YTGMv5_U7NY3h55vPm5-Br05GNck8u-PwmeHXp6A3cZgml4J99-ehQdk-pdtngbY9ywc9w9zgEGvxFH7sfXAvP9mBr26bQ9pYrfuc023h8de7xj0QdP-x77u_ift8IbyxvFemixlBzZI31zQ4TvlbynK8kqYN5_fNFfrbLNNPjMP7XDOTtJ3kcj7zMBTWG2ssl_Xs21HxqFr6OGUeqvCy9UnNUY7nj-ZXKTpB-DFhijba0FP__W8O008GwC1l5qpvbKwpien_GPqfVWbaOp_0hyXDmwECEarjLVDBpAOs273ttv0hPtpSuJTtdzQ50c6TB_kjdl4S2-QCR6QDipnTB7zf14qWTCCGgnMBuNMoJxSvE8Pu63eOLCKl4HV61vFUJILez-L75jM2fphvROdaw8dhURPAOUxsGfe8fJ0x4l1wgruhe_ljeHd1YdW-jUjMzaN-_u9Fjl94EqZpoEZ-voZXUyul97WwjqSmn-6Ym1T9tnv_azf2mD5tjr-RpUBL9x2h_h5MmFJZO7tdGYQqX6fsLPg2Jr9w1ltbKI7Myl9nA9Hh-1fDO-x8W6jssIbm7dx6yjzU4ZG9Xhw-jqc4LfhWn4IpWNyu2oYWQNZEafLmOtZQgX3OI8tK5qkdgUuZUEaaRBE5UFJPQr5mmEYzfIHBM_d7wplqzJ60bI0nqXGswbHRRwGHWvqCjC65REFlXDjnP3T2rbTmFs7X6N07uhuuUZ-Vj4ckTeZk9U4v4G_9GnNkd487fLnmzHvrU4BXbupP_eUJjqpWLQWdzpuUm-2NQV1ds7W7uzzrMufK0XgvFz2xkbfTo0_K2c2YeF3YAzIM-I3ypcBZc3e6A13WSgvAH0V5D5wkzfkdVdRTqmb82mwft23Jp1VUQnTixNZG8NLAasz9dbBFIPytzyg01iHxm4F2l19chhBHL43gOfzLnO14ySa9miFk8pU1-g7lBBVZ9BMOMF9jRkudUbeqpiRXXy6QbvW-Ko2U1Faz9kGn_U-ZK8VLz2dJZ3UXszneVdnEI6srB-vL6BXyRvRKJxo1SEb9_XqxXLLRRxqCL3JjSfBjOqg4W0iKg3zxLS-F6cQu8LGXFC0Mw1T2aGc4zOsC7CX7WH2XWBFCy3WajohKG2JcJ6_MKID44VZok7BLatcOAMTjHwvrX7kUJAadh3Kx0vVkL3AGnXKQvNot8GsMYM-Zd-NC-Vd_7Vxi610gJfAlsokCrJUsYDzb8Mosj64_ijt_wx9JuiPNCAjLxaHUALkycmnj6OiYoDaVedHqVnoFnLpHPXr--5WqQ877arwQt3cfW__K9T6G-4VeuNssO_b-FfRHi37RKCNfhyGPs6UxVyWeUbknoE1m0KZnaAP0n3SYTCg-lro14-h_nc7sbk13qkwAqFELLalwobxWn5_XdfJrCOAXtFHoxwpw0X7M8L8TqdWXVp8bQRO2NNWn3SjOeWyfgpRGThD51aihtct61AqEjerE_6h3R3qxpBNAt8-oa84aSba3qpzFy3porh1wpxoHbDv0cFqg_PqmVbxLkPY_fLb7yj9nxmHbfbT-6OCXo9JjTzp3eoHNd6wmwC9vbqqQj7aDqH18Z627cBKnJOxiVlGQZbhc7oHRpVf0nFBzyTkr6vWVGqoDH70RD1CnShRKN59wYgHJp_o0uGml4Eb_X4hVFpKzJZCRk8dKsKnT-0Rkg8axLVDr8IKCilKzhJxx6gcgCCyhUlF8Cg4DlSfI_l3w2xl_qSgahJWOgVayzbvs8gvKeTqrFfkQlEXclYABMInJdBZloZvWQbq90-KF9zULC-YD3R3Jhh_ne0u7v1iVSa8T03SAoQcmvwqUeq0xWh09Qdno4zuJL874f0ZWomwulZHXf9iUQa6BCh0BZlodDUMgJRI9LdKooNHUA_0-QVqJ2iB2rsUeOHyF08ntVyya6KW6--1rLc7j37IMGKVmtngblWrgfzbipEppGTnyojEkzY4vuB0wrMyLnVAXbbeF_k5yQ4Q0ev5_MZmi3XoDOA3TduVB7oWTlaemnU5&uniformat=true&callback=Ya%5B9213874791438%5D HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
uniformat: true
uniformat-product-type: Direct
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
access-control-allow-origin: http://ritorika.com.ua
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
x-yandex-req-id: 1675898847226641-5629830754087197499-vla1-5334-vla-l7-balancer-8080-BAL-5275
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
last-modified: Wed, 08 Feb 2023 23:27:27 GMT
date: Wed, 08 Feb 2023 23:27:27 GMT
set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Wed, 15-Feb-2023 23:27:27 GMT
i=VchtCCBFNroAzUN4Nj3RqZy9x/Y7n4exHwzv7msKRN+rvRqUcC4M6KBsQbEwwzKmyeMfe0lmeoyJPNMsY3lCsCYU1Xk=; Expires=Fri, 07-Feb-2025 23:27:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=3934880011675898847; Path=/; Domain=.yandex.ru; Expires=Thu, 08 Feb 2024 23:27:27 GMT; SameSite=None; Secure; HttpOnly
content-type: application/json
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
x-content-type-options: nosniff
ssr: true
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
expires: Wed, 08 Feb 2023 23:27:27 GMT
X-Firefox-Spdy: h2
cdn.adfinity.pro/partners/ritorika.com.ua/hbconfig.js
200 OK 0 B URL HTTP/2 cdn.adfinity.pro/partners/ritorika.com.ua/hbconfig.js
IP
ASN #210756 G-Core Rus LLC
GET /partners/ritorika.com.ua/hbconfig.js HTTP/1.1
Host: cdn.adfinity.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: application/javascript
last-modified: Tue, 27 Dec 2022 12:53:31 GMT
etag: W/"63aaeacb-b8f"
cache: HIT
x-cached-since: 2023-02-08T23:24:43+00:00
x-id: m9-up-gc86
content-encoding: gzip
X-Firefox-Spdy: h2
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 0 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=63bb7f3a3f3c45d383ada451428af323
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=63bb7f3a3f3c45d383ada451428af323; expires=Thu, 08 Feb 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
date: Wed, 08 Feb 2023 23:27:24 GMT
X-Firefox-Spdy: h2
csync.smilewanted.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: csync.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796822e7280bb50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/42093449?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22718954%22%3A%7B%22remoteLogString%22%3A%7B%22Error%22%3A%7B%7D%7D%7D%7D&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A863181608%3Arqn%3A4%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/42093449?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22718954%22%3A%7B%22remoteLogString%22%3A%7B%22Error%22%3A%7B%7D%7D%7D%7D&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A863181608%3Arqn%3A4%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(2)
IP
GET /watch/42093449?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22718954%22%3A%7B%22remoteLogString%22%3A%7B%22Error%22%3A%7B%7D%7D%7D%7D&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A863181608%3Arqn%3A4%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr(14)mc(p-7-h-2)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/42093449/1?page-url=http%3A%2F%2Fritorika.com.ua%2Frukovodstvo%2F31%2Fchto-znachit-razdaetsja-v-torrente-i-chto-delat&charset=utf-8&site-info=%7B%22718954%22%3A%7B%22remoteLogString%22%3A%7B%22Error%22%3A%7B%7D%7D%7D%7D&hittoken=1675898847_c1fa853c2b2cc8bbdcc43b0bc08ad9580feb0f7cd98b6c08fae58dd389197d7f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A4%3Adp%3A0%3Als%3A290762887883%3Ahid%3A587863077%3Az%3A0%3Ai%3A20230208232824%3Aet%3A1675898904%3Ac%3A1%3Arn%3A863181608%3Arqn%3A4%3Au%3A167589890338581436%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675898899507%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675898904%3At%3A%D0%A7%D1%82%D0%BE%20%D0%B7%D0%BD%D0%B0%D1%87%D0%B8%D1%82%20%D1%80%D0%B0%D0%B7%D0%B4%D0%B0%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82%D0%B5%20%D0%B8%20%D1%87%D1%82%D0%BE%20%D0%B4%D0%B5%D0%BB%D0%B0%D1%82%D1%8C%20%D0%B4%D0%B0%D0%BB%D1%8C%D1%88%D0%B5&t=gdpr%2814%29mc%28p-7-h-2%29clc%280-0-0%29rqnt%284%29aw%281%29fip%281%29ti%282%29
date: Wed, 08 Feb 2023 23:27:28 GMT
access-control-allow-origin: http://ritorika.com.ua
set-cookie: yabs-sid=1808079441675898848; Path=/; SameSite=None; Secure
i=5b0NkovOsXeGIBgwT1V+EE1mgdwIHEmiwtAKunF6cVolQzKz2ueLkzLRZF6S1b+345pgIhACC4QdrtDywq5AUwXpxUs=; Expires=Sat, 05-Feb-2033 23:27:11 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=6226875401675898848; Expires=Thu, 08-Feb-2024 23:27:28 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6226875401675898848; Expires=Thu, 08-Feb-2024 23:27:28 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707434848.yc.1675898848#1707434848.yrts.1675898848#1707434848.yrtsi.1675898848; Expires=Thu, 08-Feb-2024 23:27:28 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 08-Feb-2023 23:27:28 GMT
last-modified: Wed, 08-Feb-2023 23:27:28 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mpsuadv.ru/lib/custom/banners.js
200 OK 0 B URL HTTP/1.1 mpsuadv.ru/lib/custom/banners.js
IP
GET /lib/custom/banners.js HTTP/1.1
Host: mpsuadv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.12.2
Date: Wed, 08 Feb 2023 23:27:32 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 387091
Last-Modified: Wed, 08 Feb 2023 11:10:05 GMT
Connection: keep-alive
ETag: "63e3830d-5e813"
Expires: Wed, 08 Feb 2023 23:27:32 GMT
Cache-Control: max-age=0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
Accept-Ranges: bytes
secure.quantserve.com/quant.js
200 OK 0 B URL HTTP/2 secure.quantserve.com/quant.js
IP
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 23:27:26 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "u+riIbpeWSVolXo4r+dT2g=="
expires: Wed, 15 Feb 2023 23:27:26 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=14
200 OK 0 B IP
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ritorika.com.ua/
Connection: keep-alive
Cookie: aid=CkIDE2PkL9x/Swq82zR8Ar8rlFpZbAA8d4X/qZ0vzX5b6n21
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 08 Feb 2023 23:27:24 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1675898844; expires=Thu, 09-Feb-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53v2=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp98v2=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1675898844; expires=Wed, 22-Feb-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v3=1675898844; expires=Thu, 23-Feb-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148v1=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v2=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp235=1675898844; expires=Fri, 10-Mar-23 23:27:24 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
ads.betweendigital.com/adjson?t=prebid
200 OK 0 B URL HTTP/2 ads.betweendigital.com/adjson?t=prebid
IP
POST /adjson?t=prebid HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 458
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=6be0600f-c766-5228-a5ce-53d3c62a7c0e; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QAKg2gNmLmNe395ZHMRgT6BZFecqHq0Lg==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
yandex.ru/ads/system/header-bidding.js
200 OK 0 B URL HTTP/2 yandex.ru/ads/system/header-bidding.js
IP
GET /ads/system/header-bidding.js HTTP/1.1
Host: yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1}
x-content-type-options: nosniff
access-control-allow-origin: *
set-cookie: i=naBBRzVffet7dXxDfvGWNWDlhuojCsOV0a9553Jl8PBP5f4N1WDifYJy/wOsTzX1BXj/xdxoQuJLGuTde2KdOhiVa0E=; Expires=Fri, 07-Feb-2025 23:27:24 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yashr=7515989641675898844; Path=/; Domain=.yandex.ru; Expires=Thu, 08 Feb 2024 23:27:24 GMT; SameSite=None; Secure; HttpOnly
expires: Thu, 09 Feb 2023 00:27:24 GMT
x-yandex-req-id: 1675898844056538-4819560035075737569-vla1-5334-vla-l7-balancer-8080-BAL-1415
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]}
cache-control: private, max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
x-robots-tag: noindex, noarchive, nofollow
X-Firefox-Spdy: h2
ads.betweendigital.com/adjson?t=prebid
200 OK 0 B URL HTTP/2 ads.betweendigital.com/adjson?t=prebid
IP
POST /adjson?t=prebid HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 458
Origin: http://ritorika.com.ua
Connection: keep-alive
Referer: http://ritorika.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-origin: http://ritorika.com.ua
access-control-allow-credentials: true
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
tuuid=5d0e31fa-a704-5228-8657-4fede5b36030; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
ut=Y-Qv3QAKEiBGytrkfZTRM3LZf-ZJh5rtdTXzjw==; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
unm=1; Max-Age=31536000; Expires=Thu, 08 Feb 2024 23:27:25 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
45.130.41.29
92.223.124.24
142.250.74.163
185.76.9.25
23.36.76.226
178.250.2.146
93.184.220.29
104.22.54.206
37.18.103.21
188.42.105.236
65.108.236.88
54.154.10.160